This vulnerability is a cross-site scripting (XSS) flaw present in Contec FX5000, FX4000, and FX3000 series devices. Successful exploitation enables an attacker to execute arbitrary scripts within the context of a logged-in user's browser session. The CVSS 3.1 base score is 5.4, indicating medium severity, with attack vector network, low attack complexity, requiring low privileges and user interaction, and impacts confidentiality and integrity with no impact on availability. The affected versions include all versions prior to 1.12.00, 1.14.00, and 1.20.00 respectively for the product lines mentioned. There is no information on patches or vendor advisories indicating remediation status.

If exploited, this XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of a logged-in user's browser, potentially leading to information disclosure or manipulation of user interactions. The impact is limited to confidentiality and integrity with no availability impact. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when interacting with the affected devices' web interfaces and consider limiting access to trusted users only.