CVE-2021-31558

DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script “DIAEhierarchyHandler.ashx”...

CVE-2021-31558

CVE-2021-31558 affects Delta Electronics DIAEnergie up to version 1.7.5 (and prior). The vulnerability is a stored cross-site scripting flaw in the descr parameter of the script DIAE_hierarchyHandler.ashx, exploitable by an unauthenticated user. Multiple connected sources corroborate this type of...