CVE-2021-22810

Schneider Electric NMC/NMC2/NMC3 devices are affected by CWE-79 Cross-site Scripting. A malicious URL can trigger script execution on privileged accounts when targeting delete policy or similar web pages. Affected products span NMC2/NMC3-based UPS, PDU, and related components (e.g., NMC2 AOS v6.9...