CVE-2021-38411

CVE-2021-38411 affects Delta Electronics DIALink (versions 1.2.4.0 and prior). The flaw is a Cross‑Site Scripting (XSS) in the API endpoint modbusWriter-Reader, where an authenticated attacker can inject arbitrary JavaScript code into the deviceName parameter, potentially enabling remote code exe...