This vulnerability allows an authenticated attacker to inject arbitrary JavaScript code into the "Task in Progress / Recent" page of Arket Globe Document Intelligence 5.0.0.559 due to insufficient input sanitization in text fields during document creation. When other users view this page, the malicious script executes in their browser context, constituting a stored Cross Site Scripting (XSS) flaw. The vulnerability is publicly disclosed but lacks a CVSS score and no vendor-provided patch or mitigation details are available. The product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation enables an attacker to execute arbitrary JavaScript in the context of other users' browsers who access the vulnerable page. This can lead to session hijacking, unauthorized actions on behalf of users, or other client-side attacks. However, exploitation requires the attacker to be authenticated and to submit malicious input. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access to the affected functionality to trusted users only and consider additional input validation or output encoding controls if possible. Monitor vendor communications for updates on patches or official mitigations.