CVE-2019-7677
XSS exists in Enphase Envoy R3.*.* via the profileName parameter to the /home URI on TCP port 8888.
Date published : 2019-02-09
https://github.com/pudding2/enphase-energy/blob/master/XSS-exp.txt
https://github.com/pudding2/enphase-energy/blob/master/XSS.png