NetSight
medium6.1

CVE-2025-34080

The Contec Co.,Ltd.

Impact

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.

Affected products

VendorProductAffected versions
ContecConprosys Hmi System
before 3.7.7

Weakness classification

References