The African Boss Get Cash application versions up to 3.2.3 suffer from a stored cross-site scripting vulnerability due to improper input neutralization during web page generation. This allows attackers with low privileges to inject malicious scripts that execute in the context of other users' browsers when they view the affected pages. The vulnerability has a CVSS v3.1 score of 6.5, reflecting network attack vector, low attack complexity, required privileges, and user interaction, with partial impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently provided, and no exploits are known in the wild.

Successful exploitation of this stored XSS vulnerability can lead to limited compromise of user confidentiality, integrity, and availability within the affected application context. Attackers may execute arbitrary scripts in users' browsers, potentially leading to session hijacking, defacement, or other malicious actions. However, the impact is rated medium due to required user interaction and limited scope of the vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users and administrators should exercise caution with user-generated content and consider implementing web application firewall (WAF) rules or input sanitization as temporary mitigations. Monitor vendor channels for updates regarding patches or official fixes.