Description (CNA)
In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting. An authenticated attacker could write HTML Code into configuration values. These values are not properly escaped when displayed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Bender / ebee / CC612 | affected 5.11.x before 5.11.2; affected 5.12.x before 5.12.5; affected 5.13.x before 5.13.2; affected 5.20.x before 5.20.2 |
| Bender / ebee / CC613 | affected 5.11.x before 5.11.2; affected 5.12.x before 5.12.5; affected 5.13.x before 5.13.2; affected 5.20.x before 5.20.2 |
| Bender / ebee / ICC15xx | affected 5.11.x before 5.11.2; affected 5.12.x before 5.12.5; affected 5.13.x before 5.13.2; affected 5.20.x before 5.20.2 |
| Bender / ebee / ICC16xx | affected 5.11.x before 5.11.2; affected 5.12.x before 5.12.5; affected 5.13.x before 5.13.2; affected 5.20.x before 5.20.2 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.