This vulnerability in tady's Tito product is a DOM-based Cross-site Scripting (XSS) flaw caused by improper neutralization of input during web page generation. It affects all versions up to 2.3 and can be exploited remotely with low attack complexity but requires user interaction. The CVSS score is 6.5, indicating a medium severity level with potential impacts on confidentiality, integrity, and availability. No known exploits in the wild or patch information are currently available.

Exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to information disclosure, modification of data, or disruption of service. The attack requires user interaction and low privileges but can affect confidentiality, integrity, and availability of the application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted input and consider implementing additional input validation or content security policies as temporary mitigations.