SolarView Compact SV-CPT-MC310 contains a cross-site scripting vulnerability in its Schedule Settings and Mail Send Setting components. An authenticated attacker with login privileges could exploit this XSS flaw to execute arbitrary OS commands on the affected system. The vulnerability affects versions from 0 up to but not including 9.00. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges at the level of logged-in user, user interaction required, scope changed, and low confidentiality and integrity impact with no availability impact.

An attacker who can log in to the affected product can exploit the XSS vulnerability to execute arbitrary operating system commands. This could lead to partial compromise of confidentiality and integrity of the system. There is no indication of availability impact. The attack requires authenticated access, limiting the exposure to authorized users or attackers who have obtained credentials.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict login access to trusted users only and monitor for suspicious activity related to Schedule Settings and Mail Send Setting interfaces.