Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-24297

Growatt Cloud portal Cross-site Scripting

Description

Due to lack of server-side input validation, attackers can inject malicious JavaScript code into users personal spaces of the web portal.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Growatt Cloud portal

Default version status: unaffected

  • 0 to < 3.6.0affected

References