This vulnerability is a CWE-79 Cross Site Scripting issue in Metagauss EventPrime, affecting versions through 3.3.9. It requires network access, low attack complexity, high privileges, and user interaction. The vulnerability impacts confidentiality, integrity, and availability to a limited extent. No vendor advisory or patch information is currently provided, and the vulnerability is publicly disclosed as of March 27, 2024.

Successful exploitation could allow an attacker with high privileges to execute arbitrary scripts in the context of the affected application, potentially leading to limited confidentiality, integrity, and availability impacts. The attack requires user interaction and privileges, which limits the scope of exploitation. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high privilege access and exercise caution with user interactions in the affected application to reduce risk.