CVE-2022-42974

In Kostal PIKO 1.5-1 MP plus HMI OEM p 1.0.1, the web application for the Solar Panel is vulnerable to a Stored Cross-Site Scripting (XSS) attack on /file.bootloader.upload.html. The application fails to sanitize the parameter filename, in a POST request to /file.bootloader.upload.html for a system update, thus allowing one to inject HTML and/or JavaScript on the page that will then be processed and stored by the application. Any subsequent requests to pages that retrieve the malicious content will automatically exploit the vulnerability on the victim's browser. This also happens because the tag is loaded in the function innerHTML in the page HTML.

• CWE-79

• https://medium.com/%40daviddepaulasantos/how-we-got-a-cve-for-a-dom-based-stored-xss-on-a-solar-panel-917b9d7b2545
• https://medium.com/%40daviddepaulasantos/how-we-got-a-cve-for-a-dom-based-stored-xss-on-a-solar-panel-917b9d7b2545

Published

Jun 21, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-42969The py library through 1.11.0 for Python allows remote attac…7.5
• CVE-2022-4297The WP AutoComplete Search WordPress plugin through 1.0.4 do…9.8
• CVE-2022-42970A CWE-306: Missing Authentication for Critical Function The …9.8
• CVE-2022-42971A CWE-434: Unrestricted Upload of File with Dangerous Type v…9.8
• CVE-2022-42972A CWE-732: Incorrect Permission Assignment for Critical Reso…7.8
• CVE-2022-42973A CWE-798: Use of Hard-coded Credentials vulnerability exist…7.8
• CVE-2022-42975socket/transport.ex in Phoenix before 1.6.14 mishandles chec…7.5
• CVE-2022-42977The Netic User Export add-on before 1.3.5 for Atlassian Conf…7.5
• CVE-2022-42978In the Netic User Export add-on before 1.3.5 for Atlassian C…7.5
• CVE-2022-42979Information disclosure due to an insecure hostname validatio…8.8
• CVE-2022-4298The Wholesale Market WordPress plugin before 2.2.1 does not …9.8
• CVE-2022-42980go-admin (aka GO Admin) 2.0.12 uses the string go-admin as a…9.8