This vulnerability (CVE-2025-0876) involves improper neutralization of input in IT's Workif, leading to Cross-Site Scripting (CWE-79). An attacker could exploit this flaw by injecting malicious scripts into web pages generated by the affected product. The vulnerability affects all versions up to 20251003. The vendor has not provided any response or patch information. The CVSS 3.1 base score is 4.1, reflecting a medium severity with network attack vector, high attack complexity, requiring high privileges, no user interaction, and impacts on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker with high privileges to execute arbitrary scripts in the context of the affected web application, potentially leading to limited confidentiality, integrity, and availability impacts. However, no known exploits are reported in the wild. The medium CVSS score reflects these limited but notable impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should monitor official channels for updates. Until a fix is released, restricting access to the affected system and limiting privileges may reduce risk.