Description
An authenticated attacker can achieve stored XSS by exploiting improper sanitization of the plant name value while adding or editing a plant.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Growatt | Cloud portal | < 3.6.0 | 3.6.0 |
Advisories 1
- ICSA-25-105-04 Growatt Cloud Applications CISA ICS & IT advisories · May 6, 2025