An authenticated attacker can achieve stored XSS by exploiting improper sanitization of the plant name value while adding or editing a plant.
2025-04-15T21:15:56.953
2025-11-12T18:48:55.190
Analyzed
CVSSv3.1: 8.8 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | growatt | cloud_portal | ≤ 3.6.0 | Yes |