description: Pluto Safety PLC Gateway Ethernet devices in ABB GATE-E1 and GATE-E2 all versions allows an unauthenticated attacker using the administrative web interface to insert an HTML/Javascript payload into any of the device properties, which may allow an attacker to display/execute the payload in a visitor browser.
problem types: Improper Neutralization of Input During Web Page Generation ('Cross-Site Scripting') CWE-79
affected:
{
product: ABB GATE-E1 and GATE-E2
vendor: n/a
versions:
status: affected, version: All versions
}