This vulnerability is a cross-site scripting (XSS) flaw in Contec RP-WAH-SR Series devices. Successful exploitation could enable an attacker to execute arbitrary scripts on the web browser of an authenticated user. The vulnerability affects versions >=0 and <1.02 as well as >=0 and <1.03. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requires privileges and user interaction, with impact on confidentiality and integrity but no impact on availability.

An attacker exploiting this vulnerability could execute arbitrary scripts in the context of a logged-in user's browser, potentially leading to unauthorized actions or data disclosure limited to the privileges of the logged-in user. The impact is limited to confidentiality and integrity with no availability impact.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when interacting with the device's web interface and avoid clicking on untrusted links while logged in.