Medium · 5.4 CVE-2022-45086 EUVD-2022-48007GHSA-xj8j-hpff-95j8

Cross-site Scripting in Smartpower Web

Published Feb 8, 2023 · Updated May 18, 2026 · Assigned by TR-CERT

Vendor: Group Arge Energy and Control Systems Product: Smartpower Web

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows Cross-Site Scripting (XSS). This issue affects Smartpower Web: before 23.01.01.

Affected products

Vendor	Product	Affected	Fixed
Group Arge Energy and Control Systems	Smartpower Web	< 23.01.01	23.01.01

References

https://www.usom.gov.tr/bildirim/tr-23-0066 government-resource broken-link
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0066 government-resource