CVE-2026-24973

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NooTheme CitiLights noo-citilights allows Reflected XSS.This issue affects CitiLights: from n/a through = 3.7.1...

CVE-2024-44843

The SteVe open platform (version v3.7.1 ) contains a security vulnerability in the web socket handshake process . An attacker can bypass authentication and execute arbitrary commands by supplying crafted OCPP requests . Exploitation details are not provided, although a proof-of-concept was noted ...