CVE-2021-44544

Description

DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.

Affected Platforms

Weakness Type

CWE-79

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-03
• https://www.cisa.gov/uscert/ics/advisories/icsa-21-238-03