This vulnerability in Fast Video and Image Display (versions up to 2.5.2) involves improper neutralization of input during web page generation, leading to a DOM-based Cross-site Scripting (XSS) issue. The CVSS 3.1 score is 6.5 (medium severity), reflecting network attack vector, low attack complexity, required privileges, user interaction, and impacts on confidentiality, integrity, and availability. The vulnerability allows an attacker with some privileges and user interaction to inject and execute malicious scripts within the application context.

Successful exploitation could lead to partial compromise of confidentiality, integrity, and availability of the affected system by executing arbitrary scripts in the victim's browser. This could facilitate actions such as session hijacking, defacement, or other malicious activities within the scope of the application. However, exploitation requires user interaction and some level of privileges, limiting the ease of attack.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with input handling and consider implementing additional input validation or content security policies to mitigate DOM-based XSS risks. Monitor vendor channels for updates and apply patches promptly once available.