This vulnerability in Property Hive allows stored XSS due to improper input neutralization during web page generation. An attacker with low privileges and requiring user interaction can inject malicious scripts that affect confidentiality, integrity, and availability to a limited extent. The issue affects all versions through 2.1.5. No patch or vendor advisory is currently available, and the vulnerability is not related to a cloud service.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of other users, potentially leading to information disclosure, session hijacking, or other client-side impacts. The CVSS vector indicates network attack vector, low attack complexity, requiring privileges and user interaction, with partial impact on confidentiality, integrity, and availability. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit user privileges to trusted users only and consider applying web application firewall (WAF) rules to detect and block XSS payloads related to Property Hive. Monitor vendor channels for updates and patches.