This vulnerability in IA Map Analytics Basic involves improper neutralization of input during web page generation, leading to a DOM-based XSS issue. It affects versions up to and including 20170413. The flaw allows an attacker with low privileges to execute arbitrary scripts in the context of the victim's browser when the victim interacts with crafted content. The CVSS vector indicates network attack vector, low attack complexity, required privileges, and user interaction, with impacts on confidentiality, integrity, and availability rated as low to low to low respectively. No patch or official fix information is provided in the available data.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to information disclosure, modification of data, or disruption of service. The impact is rated medium severity with low confidentiality, integrity, and availability impacts individually, but combined they warrant attention. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should apply standard defenses against XSS such as input validation and output encoding where possible. Monitor vendor channels for updates and apply official patches once released.