This vulnerability involves stored XSS in OpenNebula v6.10.0.1, where an attacker can inject arbitrary scripts or HTML into the user information parameter. When other users or administrators view the affected data, the malicious script executes in their browsers, potentially leading to session hijacking or other web-based attacks. The CVE entry does not provide a CVSS score or detailed technical mitigation steps. No vendor advisory or patch information is currently available, and the vulnerability is not related to a cloud service.

Successful exploitation allows execution of arbitrary scripts in the context of the OpenNebula web interface, which may lead to unauthorized actions such as session hijacking or data manipulation. The impact is limited to the web application interface and depends on user interaction with the injected content. There are no reports of active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should consider restricting input fields, applying web application firewalls with XSS protections, or sanitizing user inputs where possible. Monitor vendor channels for updates and patches.