This vulnerability involves a cross-site scripting (XSS) flaw in the CONPROSYS nano Series Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* by Contec Co., Ltd. Successful exploitation enables an attacker to execute arbitrary scripts on the web browser of an authenticated user. The CVSS 3.1 base score is 5.4 (medium), with network attack vector, low attack complexity, requiring privileges and user interaction, and impacts confidentiality and integrity with no impact on availability. Affected versions include all versions prior to 1.82, 1.02, and 1.61 as specified.

If exploited, this XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of a logged-in user's browser, potentially leading to information disclosure or manipulation of user interactions. The impact is limited to confidentiality and integrity, with no availability impact reported.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when interacting with the affected device's web interface and consider limiting access to trusted users only.