Loading
Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. If a user who can access the affected product with an administrative privilege configures specially crafted settings, an arbitrary script may be executed on the web browser of the other user who is accessing the affected product with an administrative privilege.
Use CWE-79, Contec vendor hub and Conprosys Hmi System product page to widen CVE-2023-28651 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2023-28657, CVE-2023-28713 and CVE-2023-28399 for nearby disclosures in the same product family.