medium5.4
CVE-2021-34590
In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting.
Impact
In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting. An authenticated attacker could write HTML Code into configuration values. These values are not properly escaped when displayed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bender | Cc612 Firmware | from 5.11.0 before 5.11.2 from 5.12.0 before 5.12.5 from 5.13.0 before 5.13.2 from 5.20.0 before 5.20.2 |
| Bender | Icc15xx Firmware | from 5.11.0 before 5.11.2 from 5.12.0 before 5.12.5 from 5.13.0 before 5.13.2 from 5.20.0 before 5.20.2 |