CVE-2024-28045

CVE-2024-28045 is a medium-severity cross-site scripting (XSS) vulnerability affecting Delta Electronics' DIAEnergie product. An authenticated attacker could exploit this flaw by injecting malicious scripts into user input, which would then execute in the victim's browser, potentially leading to information disclosure or unauthorized actions. While the attack complexity is low, requiring user interaction, there is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.