This vulnerability involves a Cross Site Scripting (CWE-79) issue in Tessi Docubase Document Management product 5.x. An attacker can exploit the page parameter to execute arbitrary code remotely. The CVSS 3.1 vector indicates the attack requires network access, low attack complexity, low privileges, and user interaction, with a scope change and limited confidentiality and integrity impact but no availability impact. No vendor advisory or patch information is currently available.

Successful exploitation could allow an attacker to execute arbitrary code in the context of the affected application, potentially leading to limited confidentiality and integrity compromise. There is no indication of availability impact or known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit exposure by restricting access to the affected application and monitoring for suspicious activity related to the page parameter. No official fix or temporary workaround is currently documented.