This vulnerability in keeross DigitalOcean Spaces Sync (<= 2.2.1) involves improper input sanitization during web page generation, leading to stored cross-site scripting (XSS). An attacker with high privileges and requiring user interaction could exploit this to execute arbitrary scripts, potentially impacting confidentiality, integrity, and availability to a limited extent. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and scope changed. No official patch or fix information is available at this time.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in other users' browsers, potentially leading to limited confidentiality, integrity, and availability impacts. The medium CVSS score reflects these moderate risks. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit high privilege access to trusted users and apply standard web application security best practices to reduce risk. Monitor official keeross channels for updates regarding patches or mitigations.