← Database

CVE-2025-34080

MEDIUM CVSS: 6.1 Published: 2025-07-01 Modified: 2026-06-17

Description

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.

Affected Platforms

Contec Conprosys Hmi System

Weakness Type

CWE-79

References