This vulnerability is a stored XSS in the VLAN configuration component of RELY-PCIe software versions 22.2.1 and 23.1.0. An attacker can inject malicious scripts that are stored and later executed in the context of the web interface, potentially leading to limited integrity impact. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed. Confidentiality impact is none, integrity impact is low, and availability impact is none.

Successful exploitation allows an attacker to execute arbitrary scripts in the context of the affected web interface, which may lead to limited integrity compromise such as unauthorized modification of displayed data or user interface manipulation. There is no direct confidentiality or availability impact reported. The vulnerability requires user interaction and does not require privileges, making it moderately exploitable but with limited impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, restrict access to the VLAN configuration interface to trusted users only and avoid interacting with untrusted input. Monitor vendor communications for updates on patches or official mitigations.