Cross site scripting

2022-10-2721:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

diaenergie

postenergytype api vulnerability

nvd

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PostEnergyType API.

CPENameOperatorVersion
diaenergielt1.9.01.002

CPE	Name	Operator	Version
	diaenergie	lt	1.9.01.002

References

www.cisa.gov/uscert/ics/advisories/icsa-22-298-06