Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could allow an authenticated attacker to view data, change settings, or impact availability of the software when the user visits a page containing the injected payload. Affected Product: EcoStruxure Power Monitoring Expert (Versions 2020 and prior)
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Schneider Electric EcoStruxure Power Monitoring Expert 跨站脚本漏洞
Vulnerability Description
Schneider Electric EcoStruxure Power Monitoring Expert是法国施耐德（Schneider Electric）公司的一个用于物联网环境中进行配电监控的设备。 Schneider Electric EcoStruxure Power Monitoring Expert 存在跨站脚本漏洞，该漏洞源于网页生成期间输入的不正确中和（“跨站点脚本”）漏洞，当用户访问包含 注入的有效载荷。
CVSS Information
N/A
Vulnerability Type
N/A