Delta Industrial Automation DIAEnergie Cross-Site Scripting (CVE-2021-44471)

A stored cross-site scripting vulnerability exists in Delta Industrial Automation DIAEnergie. The vulnerability is due to input validation error when processing name parameter in HandlerAlarmGroup.ashx endpoint...

CVE-2021-44471

CVE-2021-44471 affects Delta Electronics DIAEnergie prior to 1.9, with a stored cross-site scripting vulnerability in the name parameter of the DIAE_HandlerAlarmGroup.ashx endpoint. Unauthenticated users can inject arbitrary code, leading to stored XSS as described in multiple sources (NVD entry,...