This vulnerability in Bowo Debug Log Manager (<= 2.3.4) involves improper neutralization of input during web page generation, leading to Stored Cross-site Scripting (XSS). An attacker can inject malicious scripts that persist in the application and execute when viewed by other users, potentially compromising user data and session integrity. The CVSS 3.1 base score of 7.1 reflects network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. The vulnerability is publicly disclosed but lacks vendor-provided patch or mitigation details.

Successful exploitation of this Stored XSS vulnerability could allow attackers to execute arbitrary scripts in the context of affected users' browsers. This may lead to theft of sensitive information, session hijacking, or other malicious activities impacting confidentiality, integrity, and availability of the affected system. The CVSS score of 7.1 indicates a high impact level. However, no known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying input validation or output encoding workarounds if feasible. Monitor vendor channels for updates and apply patches promptly once released.