This vulnerability involves improper neutralization of input in the Photospace Responsive web design product, leading to stored cross-site scripting (XSS). An attacker with high privileges (PR:H) can inject malicious scripts that execute in the context of other users when they interact with the affected web pages. The vulnerability affects versions up to 2.2.0. The CVSS vector indicates network attack vector, low attack complexity, required privileges, required user interaction, and impacts confidentiality, integrity, and availability at a low to medium level. No official patch or vendor advisory is provided in the data.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in other users' browsers, potentially leading to partial confidentiality, integrity, and availability impacts. The attack requires user interaction and privileges, limiting the ease of exploitation. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user access and monitor for suspicious input handling. Avoid enabling untrusted user input in web page generation. Follow up with the vendor for updates on patches or official mitigations.