This vulnerability in Ajay Knowledge Base allows an attacker to inject and store malicious scripts due to improper input sanitization during web page generation. When other users view the affected pages, the stored scripts can execute in their browsers, potentially leading to information disclosure, session hijacking, or other impacts typical of stored XSS. The issue affects all versions up to 2.2.0. No known exploits in the wild or official patches have been reported yet.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to limited confidentiality, integrity, and availability impacts as indicated by the CVSS vector. This could result in user session compromise or unauthorized actions performed on behalf of users.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should apply standard XSS mitigations such as input validation and output encoding where possible. Monitor official Ajay communications for updates on patches or workarounds.