CVE-2023-25551

Summary of CVE-2023-25551 (CWE-79, XSS) : A cross-site scripting vulnerability exists in Schneider Electric StruxureWare Data Center Expert (DCE) file upload endpoint, exploitable by tampering with HTTP parameters. Affected products: StruxureWare Data Center Expert (versions prior to 7.9.2). Root...