This vulnerability in intelligentDesign Keymaster Chord Notation Free (<= 1.0.2) is a stored cross-site scripting (XSS) flaw caused by improper neutralization of input during web page generation. An attacker can inject malicious scripts that persist within the application, potentially executing in the browsers of users who access the affected content. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring privileges and user interaction, with a scope change and partial impact on confidentiality, integrity, and availability.

Successful exploitation of this stored XSS vulnerability can allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to theft of user credentials, session hijacking, or other malicious actions impacting confidentiality, integrity, and availability. The CVSS score of 6.5 reflects a medium severity impact. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should apply standard XSS mitigations such as input validation and output encoding where possible. Monitor vendor communications for updates on patches or official fixes.