CVE-2023-46344: Improper Neutralization of Input During Web Page Generation

A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an attacker to escalate their privileges by exploiting a stored cross-site scripting XSS vulnerability in the switch group function under /ilang=DE&b=csmartenergyswgroups in the web...

PT-2023-29965

Name of the Vulnerable Software and Affected Versions Solar-Log Base 15 Firmware version 6.0.1 Build 161 Description A stored cross-site scripting XSS vulnerability in the switch group function under the /ilang=DE&b=c smartenergy swgroups endpoint in the web portal allows an attacker to escalate...