EVlink City, EVlink Parking, EVlink Smart Wallbox Cross-Site Scripting Vulnerability (CNVD-2021-62163)

Schneider Electric EVlink City and others are a charging solution for electric vehicle charging stations from Schneider Electric (France). EVlink City, EVlink Parking, and EVlink Smart Wallbox have a cross-site scripting vulnerability that vulnerability stems from the potential to cause code injection when importing CSV files or changing station parameters. No details of the vulnerability are available at this time.