description: Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the management page of the affected product.
problem types: Cross-site scripting (XSS)
affected:
{
vendor: SHARP CORPORATION
product: Energy Management Controller with Cloud Services
versions:
version: JH-RVB1 Ver.B0.1.9.1 and earlier, status: affected
}
{
vendor: SHARP CORPORATION
product: Energy Management Controller with Cloud Services
versions:
version: JH-RV11 Ver.B0.1.9.1 and earlier, status: affected
}
