Description
SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolarEdge | SolarEdge Monitoring platform (SaaS) | unkown | — |
References
- https://csirt.divd.nl/CVE-2025-36746 third-party-advisory
- https://csirt.divd.nl/DIVD-2025-00022/ third-party-advisory