This vulnerability involves improper neutralization of input during web page generation in the Wetterwarner application, leading to stored cross-site scripting (XSS). An attacker with high privileges and requiring user interaction could exploit this to execute arbitrary scripts in the context of the affected application. The issue affects Wetterwarner versions up to 2.7.3. No official patch or vendor advisory is available to confirm remediation status.

Successful exploitation could result in limited confidentiality, integrity, and availability impacts as indicated by the CVSS vector (C:L/I:L/A:L). This means an attacker might be able to execute scripts that could steal data, modify content, or cause minor disruption within the application context. However, exploitation requires high privileges and user interaction, which limits the attack surface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high privilege user access and educate users to avoid interacting with suspicious content. Monitor for updates from the vendor regarding patches or official mitigations.