This vulnerability in Inspectlet – User Session Recording and Heatmaps (up to version 2.0) involves improper neutralization of input during web page generation, resulting in stored cross-site scripting (XSS). An attacker could inject malicious scripts that are stored and later executed in the context of users' browsers, potentially leading to limited confidentiality, integrity, and availability impacts as reflected by the CVSS vector (AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L).

Successful exploitation could allow an attacker with high privileges and user interaction to execute malicious scripts in the context of affected users, potentially leading to limited disclosure of information, modification of data, and disruption of availability. The impact is limited by the requirement for high privileges and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Users should monitor vendor communications for updates and apply patches once released. Until then, consider restricting access to the affected versions and exercising caution with user input handling.