The vulnerability CVE-2025-6924 in Talent Software e-BAP Automation is a reflected Cross-site Scripting (XSS) issue caused by improper input neutralization during web page generation. This allows an attacker to inject malicious scripts that execute in the context of a victim's browser when they interact with crafted input. The affected versions are those before build 42957. The CVSS v3.1 base score is 5.4, reflecting a network attack vector, low attack complexity, no privileges required, user interaction needed, unchanged scope, and limited confidentiality and integrity impacts.

Successful exploitation of this vulnerability can lead to limited confidentiality and integrity impacts, such as theft of user session data or manipulation of displayed content in the victim's browser. There is no impact on system availability. The attack requires user interaction, limiting the ease of exploitation. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Talent Software's advisories for updates. Until a fix is available, consider applying input validation or output encoding controls if possible to mitigate reflected XSS risks in affected versions.