This vulnerability in Kion Computer's KION Exchange Programs Software involves improper input sanitization during web page generation, leading to reflected Cross-site Scripting (CWE-79). It affects versions prior to 1.21.9092.29966. The CVSS 3.1 base score is 5.5, with network attack vector, low attack complexity, requiring low privileges and user interaction, and impacts confidentiality, integrity, and availability at a low level. No official remediation or patch has been documented yet, and the software is not a cloud service.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to limited confidentiality, integrity, and availability impacts. However, the attack requires user interaction and low privileges, which reduces the overall risk. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted input and consider implementing web application firewall rules or input validation as temporary mitigations specific to the affected software. Monitor vendor communications for updates.