This vulnerability in fridaysystems Inventory Presser involves improper input sanitization during web page generation, leading to stored cross-site scripting (XSS). Attackers can inject malicious scripts that persist in the application and execute when other users access the affected content. The issue affects versions up to 15.2.6. The CVSS vector indicates the attack requires network access, low attack complexity, high privileges, user interaction, and impacts confidentiality, integrity, and availability to a limited extent.

Successful exploitation could allow an attacker with high privileges and user interaction to execute arbitrary scripts in the context of other users, potentially leading to limited confidentiality, integrity, and availability impacts. This could result in session hijacking, defacement, or other malicious actions within the application context. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — no patch or official remediation information is currently available. Users should monitor the vendor's advisory channels for updates and apply any official fixes once released. Until then, consider restricting high-privilege user input and applying web application firewall (WAF) rules to detect and block XSS payloads if feasible.