CVE-2022-42974 | Kostal PIKO 1.5-1 file.bootloader.upload.html innerHTML filename cross site scripting

A vulnerability was found in Kostal PIKO 1.5-1. It has been classified as problematic. Affected is the function innerHTML of the file /file.bootloader.upload.html. The manipulation of the argument filename leads to cross site scripting.

This vulnerability is traded as CVE-2022-42974. It is possible to launch the attack remotely. There is no exploit available.