This vulnerability is an improper neutralization of input during web page generation (CWE-79) in SweetDate Core before version 1.1.5. It allows unauthenticated attackers to perform Cross-Site Scripting (XSS) attacks, potentially leading to partial confidentiality, integrity, and availability impacts. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No official patch or remediation level is currently confirmed in the vendor advisory or patch links.

Successful exploitation can lead to execution of malicious scripts in the context of the victim's browser, potentially resulting in partial loss of confidentiality, integrity, and availability of the affected system or user data. The vulnerability is exploitable remotely without authentication but requires user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider applying input validation and output encoding controls as temporary mitigations to reduce the risk of XSS. Monitor vendor communications for updates on patches or official mitigations.