Cross site scripting

2021-12-2219:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.8%

JSON

DIAEnergie Version 1.7.5 and prior is vulnerable to a reflected cross-site scripting attack through error pages that are returned by “.NET Request.QueryString”.

CPENameOperatorVersion
diaenergiele1.7.5

CPE	Name	Operator	Version
	diaenergie	le	1.7.5

References

www.cisa.gov/uscert/ics/advisories/icsa-21-238-03