This vulnerability involves improper neutralization of input in the Google Org Chart software, leading to stored cross-site scripting (XSS). An attacker could inject malicious scripts that are stored and later executed in the context of users viewing the affected web pages. The issue affects versions up to 1.0.1. The CVSS vector indicates the attack requires network access, low attack complexity, privileges, and user interaction, with impacts on confidentiality, integrity, and availability rated as low to low and low respectively.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to information disclosure, modification of data, or disruption of service. The impact is rated medium severity with limited confidentiality, integrity, and availability impacts. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for updates from the vendor. Until a fix is available, consider restricting privileges and user interactions where possible to reduce risk.