Themify Audio Dock versions up to 2.0.5 suffer from a stored cross-site scripting vulnerability due to improper input neutralization during web page generation. This allows attackers with high privileges and requiring user interaction to inject malicious scripts that can lead to partial confidentiality, integrity, and availability impacts. The vulnerability is network exploitable with low attack complexity but requires privileges and user interaction. No patch or vendor advisory is currently provided.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the context of other users, potentially leading to partial compromise of confidentiality, integrity, and availability of the affected system. The impact is rated medium based on the CVSS score of 5.9. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should limit privileges to trusted users and exercise caution with user input. Monitor for vendor updates regarding patches or official mitigations.