This vulnerability in Zoefff Werk aan de Muur (versions <= 1.5) involves improper neutralization of input during web page generation, leading to stored cross-site scripting (XSS). The CVSS vector indicates the attack requires network access, low attack complexity, high privileges, and user interaction, with impacts on confidentiality, integrity, and availability rated as low. No patch or official remediation guidance is currently provided.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that are stored and later executed in the context of other users, potentially leading to partial compromise of confidentiality, integrity, and availability of the affected system. However, the impact is rated medium, reflecting limited scope or complexity of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting high privilege user input and applying web application firewall (WAF) rules to detect and block XSS payloads relevant to this product.