This vulnerability in Bold pagos en linea involves improper neutralization of input during web page generation, leading to a DOM-Based XSS condition. This means that user-controllable input is not properly sanitized before being incorporated into the web page's DOM, potentially allowing attackers to inject and execute arbitrary scripts within the victim's browser session. The issue affects versions up to 3.1.4. No CVSS score or vendor advisory patch information is currently available.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript in the context of the affected web application, potentially leading to session hijacking, defacement, or other client-side attacks. However, no known exploits have been reported in the wild, and the exact impact depends on the deployment context and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying input validation and output encoding on their own if possible, or restrict usage of affected versions. Monitor vendor communications for updates regarding patches or official mitigations.