This vulnerability is a CWE-79 type stored XSS in BracketSpace Advanced Cron Manager – debug & control, caused by improper input sanitization during web page generation. It affects all versions up to 2.5.2. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and impacts confidentiality, integrity, and availability at a low level. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Successful exploitation could allow an attacker with high privileges and requiring user interaction to inject and execute malicious scripts within the application context, potentially leading to limited confidentiality, integrity, and availability impacts. Since it is a stored XSS, the malicious payload could persist and affect multiple users who access the compromised content.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit exposure by restricting access to trusted users with high privileges and exercising caution with user inputs. Monitor official BracketSpace channels for updates on patches or mitigations.