Description
The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Contec | CONPROSYS HMI System (CHS) | < 3.7.7 | 3.7.7 |
References
- https://jvn.jp/en/vu/JVNVU92266386/ third-party-advisory
- https://www.vulncheck.com/advisories/conprosys-hmi-system-reflected-xss third-party-advisory