2 matches found
Cross site scripting
DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script “DIAEhierarchyHandler.ashx”...
4.3CVSS6.9AI score0.10562EPSS
SaveExploits0References1Affected Software1
CVE-2021-31558: Improper Neutralization of Input During Web Page Generation
DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script “DIAEhierarchyHandler.ashx”...
6.5CVSS5.9AI score0.10562EPSS
SaveExploits0References2
20