This vulnerability in Pixobe Cartography involves improper neutralization of input during web page generation, leading to a DOM-based XSS condition. It affects versions up to 1.0.1. The CVSS vector indicates the attack requires network access, low attack complexity, privileges, and user interaction, with a scope change and impacts on confidentiality, integrity, and availability at a low to medium level. No vendor advisory or patch information is provided, and no known exploits have been reported.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to unauthorized actions or data exposure. The impact is rated medium based on the CVSS score, reflecting limited but non-negligible confidentiality, integrity, and availability impacts. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying input validation or sanitization controls where possible and limit privileges of users interacting with the application. Monitor official Pixobe channels for updates regarding patches or mitigations.