Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-28651
HistoryJun 01, 2023 - 2:15 a.m.

Cross site scripting

2023-06-0102:15:00
PRIOn knowledge base
www.prio-n.com
vulnerability
conprosys hmi system
administrative privilege
web browser
arbitrary script

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.9%

Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. If a user who can access the affected product with an administrative privilege configures specially crafted settings, an arbitrary script may be executed on the web browser of the other user who is accessing the affected product with an administrative privilege.

CPENameOperatorVersion
conprosys_hmi_systemlt3.5.3

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.9%

Related for PRION:CVE-2023-28651