This vulnerability, identified as CWE-79, involves improper input sanitization in Toidicode.com's Viet Nam Affiliate product, leading to stored cross-site scripting. An attacker could inject malicious scripts that are stored and later executed in the context of users visiting the affected web pages. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring high privileges and user interaction, with impacts on confidentiality, integrity, and availability rated as low to low to low respectively. No official patch or vendor advisory is available to confirm remediation status.

Successful exploitation could allow an attacker with high privileges and user interaction to execute arbitrary scripts in the context of other users, potentially leading to limited confidentiality, integrity, and availability impacts. This could result in session hijacking, defacement, or other malicious actions within the affected application environment. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with high-privilege accounts and limit exposure to untrusted input. Monitor vendor channels for updates regarding patches or mitigations.