This vulnerability in RealMag777 BEAR (up to version 1.1.4.4) involves improper input sanitization during web page generation, leading to stored cross-site scripting (XSS). An attacker could inject malicious scripts that persist and execute when other users access the affected pages. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, scope changed, and low impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker with high privileges and requiring user interaction to execute arbitrary scripts in the context of other users, potentially leading to limited confidentiality, integrity, and availability impacts. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — no official fix or patch information is available from the vendor or other advisories. Users should monitor vendor communications for updates and apply patches once released. Until then, consider restricting high-privilege user input and applying web application firewall rules to detect and block suspicious input patterns related to XSS.