AVEVA PI Web API 跨站脚本漏洞

AVEVA PI Web API is an API interface from AVEVA UK. A cross-site scripting vulnerability exists in AVEVA PI Web API 2023 SP1 and prior versions, which stems from allowing an authenticated attacker to persist arbitrary JavaScript code, potentially leading to cross-site scripting attacks...