← Database

CVE-2025-24297

CRITICAL CVSS: 9.8 Published: 2025-04-15 Modified: 2026-06-17

Description

Due to lack of server-side input validation, attackers can inject malicious JavaScript code into users personal spaces of the web portal.

Affected Platforms

Growatt Cloud Portal

Weakness Type

CWE-79

References