critical9.8
CVE-2025-24297
Due to lack of server-side input validation, attackers can inject malicious JavaScript code into users personal spaces of the web portal.
Impact
Due to lack of server-side input validation, attackers can inject malicious JavaScript code into users personal spaces of the web portal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Growatt | Cloud Portal | through 3.6.0 |