This vulnerability in Nasir Ahmed Advanced Form Integration (up to version 1.95.0) allows an attacker to inject and store malicious scripts due to improper input neutralization during web page generation, resulting in stored cross-site scripting (XSS). The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring high privileges and user interaction, with impact on confidentiality, integrity, and availability at a low level. No patch or official fix details have been provided, and the product is not a cloud service.

Successful exploitation could allow an attacker with high privileges and requiring user interaction to execute arbitrary scripts in the context of affected users, potentially leading to limited confidentiality, integrity, and availability impacts. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should limit high-privilege access and be cautious with user interactions involving the affected product. Monitor vendor channels for updates on official patches or mitigations.