CVE-2022-45087: Gruparge Smartpower Web

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows Cross-Site Scripting (XSS). This issue affects Smartpower Web: before 23.01.01.

Affected products

• Gruparge Smartpower Web: before 23.01.01 (fixed in 23.01.01)

Published 2023-02-12. Last modified 2026-06-17.