This vulnerability in zwwooooo zBench (up to version 1.4.2) is classified as CWE-79, involving improper neutralization of input during web page generation that leads to stored cross-site scripting (XSS). An attacker could inject malicious scripts that persist on the affected web pages and execute in the context of other users. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring low privileges and user interaction, with impact on confidentiality, integrity, and availability rated as low to low to low respectively, resulting in an overall medium severity score of 6.5. No patch or official remediation has been published yet.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of affected users, potentially leading to information disclosure, session hijacking, or other impacts on confidentiality, integrity, and availability. However, the impact is rated medium and no active exploits are known. The vulnerability requires user interaction and some privileges to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should apply standard XSS mitigations such as input validation and output encoding where possible. Monitor vendor communications for updates on patches or official workarounds.