This vulnerability in Append extensions on Pages allows an attacker with high privileges and user interaction to inject and store malicious scripts due to improper input sanitization during web page generation. The vulnerability can lead to partial confidentiality, integrity, and availability impacts as indicated by the CVSS vector (AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L). It affects all versions up to 1.1.2. No patch or official fix information is provided in the available data.

Successful exploitation could allow an attacker with high privileges to execute stored cross-site scripting attacks, potentially leading to partial compromise of confidentiality, integrity, and availability of the affected system. However, exploitation requires user interaction and high privileges, which limits the attack scope. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected product to trusted users only and consider applying input validation or sanitization controls at the application or web server level if feasible.