Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401 BMXNOE0100 BMXNOE0110 BMXNOE0110H BMXNOR0200H BMXP342020 BMXP342020H BMXP342030 BMXP3420302 BMXP3420302H or BMXP342030H PLC client browser.