The pshikli Accessibility Task Manager contains a reflected cross-site scripting vulnerability due to improper input neutralization during web page generation. This flaw affects versions up to 1.2.1 and allows attackers to inject malicious scripts that can execute in users' browsers when they interact with crafted web pages. The vulnerability is remotely exploitable without privileges and requires user interaction. It impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 7.1.

Successful exploitation of this vulnerability can lead to execution of arbitrary scripts in the context of the victim's browser, potentially resulting in information disclosure, session hijacking, or other malicious actions affecting confidentiality, integrity, and availability of user data and application functionality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted input and consider implementing web application firewall (WAF) rules to detect and block reflected XSS attempts. Monitor vendor channels for updates regarding patches or official mitigations.