Delta Electronics DIAEnergie HandlerEnergyType Parameter Name Cross-Site Scripting Vulnerability

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A cross-site scripting vulnerability exists in Delta Electronics DIAEnergie, which stems from HandlerEnergyType’s parameter names are filtered against user-supplied data and output data checks. An attacker could exploit this vulnerability to execute JavaScript code on the client side.