This vulnerability is a cross-site scripting (XSS) flaw in the CONPROSYS PAC Series product Integrated Type CPS-PC341[][]-*-9201 by Contec Co., Ltd. Successful exploitation enables an attacker to execute arbitrary scripts within the web browser session of an authenticated user. The affected versions are all releases from 0 up to but excluding 3.0.0. The CVSS v3.1 base score is 6.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality and integrity with no impact on availability.

An attacker exploiting this XSS vulnerability can execute arbitrary scripts in the context of a logged-in user's browser, potentially leading to session hijacking, unauthorized actions, or data disclosure limited to the user's session. There is no indication of impact on system availability. The vulnerability requires user interaction and no privileges, but affects the confidentiality and integrity of user data within the web application scope.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when interacting with untrusted content in the affected product's web interface. Monitor vendor communications for updates.