This vulnerability in RSV 360 View involves improper neutralization of input during web page generation, leading to a DOM-based Cross-site Scripting (XSS) issue. An attacker with low privileges can exploit this by tricking a user into interacting with malicious content, potentially resulting in partial confidentiality, integrity, and availability impacts. The vulnerability affects versions up to 1.0 of RSV 360 View. No patch or official remediation guidance has been provided as of the publication date.

Successful exploitation could allow an attacker to execute arbitrary scripts in the victim's browser within the context of the vulnerable application. This may lead to limited confidentiality, integrity, and availability impacts as indicated by the CVSS vector. However, exploitation requires user interaction and low privileges, which somewhat limits the risk. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when interacting with untrusted content in the application. Monitor for vendor updates regarding patches or mitigations.