This vulnerability involves improper input sanitization in the Send E-mail application by Paolo Melchiorre, leading to stored cross-site scripting. Attackers can inject malicious scripts that persist in the application and execute when viewed by other users. The CVSS vector indicates the attack requires network access, low attack complexity, privileges, and user interaction, with impacts on confidentiality, integrity, and availability rated as low to low and low respectively. The affected versions are up to 1.3, but no patch or remediation information is currently available.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to information disclosure, modification of data, or disruption of service. The impact is rated medium severity based on the CVSS score of 6.5. There are no known active exploits reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting privileges and user interactions that could trigger the vulnerability. Monitor official channels for updates from Paolo Melchiorre regarding patches or mitigations.