CVE:CVE-2022-45086
CNNVD:CNNVD-202302-823
Grup Arge Energy and Control Systems SmartPower Energy Management System是Grup Arge Energy and Control Systems公司的一个基于网络的系统，专为提高企业能源效率而开发。
Grup Arge Energy and Control Systems SmartPower Energy Management System Web 23.01.01之前版本存在跨站脚本漏洞，该漏洞源于对用户的输入中和不当。攻击者利用该漏洞执行跨站脚本攻击。
solution:Upgrade gruparge smartpower_web to a higher version than 23.01.01,and avoid the version (,23.01.01)