An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all versions prior to V1.5.0. The homeLYnk controller is susceptible to a cross-site scripting attack. User inputs can be manipulated to cause execution of JavaScript code.
CPE | Name | Operator | Version |
---|---|---|---|
homelynk_controller_lss100100_firmware | eq | 1.3.0 |