This vulnerability involves improper input neutralization in the N360 | Splash Screen component of bistromatic software, leading to stored cross-site scripting (XSS). An attacker with high privileges and requiring user interaction could inject malicious scripts that execute within the security context of the affected web application. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and impacts on confidentiality, integrity, and availability at a low level. The vulnerability affects versions up to 1.0.6. No patch or official fix information is currently available.

Successful exploitation could allow an attacker with high privileges to inject and store malicious scripts that execute when other users interact with the affected splash screen component. This could lead to limited confidentiality, integrity, and availability impacts within the application context. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit high-privilege access to the affected component and apply any available workarounds recommended by the vendor. Monitor vendor channels for updates regarding patches or mitigations.