This vulnerability in ezlab Assist24 Help Desk allows an attacker to perform DOM-based XSS by injecting malicious scripts due to improper input neutralization during web page generation. It affects versions up to 20150401.2. The CVSS vector indicates the attack requires network access, low attack complexity, privileges, and user interaction, with partial impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to partial disclosure of information, modification of data, and disruption of availability within the affected application environment. However, no known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted input and consider applying any available workarounds or input validation controls if feasible.