PT-2021-24113

Name of the Vulnerable Software and Affected Versions: DIAEnergie versions 1.7.5 and prior Description: The issue concerns stored cross-site scripting. An unauthenticated user can inject arbitrary code into the name parameter of the "DIAE HandlerAlarmGroup.ashx" script, potentially leading to...