medium5.4
CVE-2025-36746
SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may exec…
Impact
SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solaredge | Solaredge Monitoring Platform | All versions |