← Database

CVE-2021-34590

MEDIUM CVSS: 5.4 Published: 2022-04-27 Modified: 2026-06-17

Description

In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting. An authenticated attacker could write HTML Code into configuration values. These values are not properly escaped when displayed.

Affected Platforms

Bender Cc613Bender Cc612 FirmwareBender Icc15Xx FirmwareBender Cc612

Weakness Type

CWE-79

References