This vulnerability in Sunbird DCIM dcTrack 9.1.2 permits authenticated administrators to inject arbitrary HTML code into an admin screen, potentially leading to content injection or manipulation within the administrative interface. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, scope changed, and low impact on confidentiality and integrity, with no impact on availability.

An attacker with administrator credentials can inject arbitrary HTML code into the admin interface, which may allow for content manipulation or other HTML-based attacks within the administrative context. The impact is limited to confidentiality and integrity with no direct availability impact. Exploitation requires valid administrator access and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, administrators should monitor vendor communications for updates. Until a fix is available, limit administrator access to trusted personnel and review administrative interface inputs carefully.