This vulnerability (CVE-2025-9798) in Netcad Software Inc. Netigma is a stored cross-site scripting (XSS) issue classified under CWE-79. It affects versions starting at 6.3.3 up to but not including 6.3.5 V8. The flaw stems from improper input neutralization during web page generation, enabling an attacker with limited privileges and requiring user interaction to execute arbitrary scripts in the context of other users. The CVSS 3.1 base score is 8.9, reflecting network attack vector, low attack complexity, privileges required, user interaction, scope change, and high confidentiality and integrity impacts with low availability impact. There is no indication of known exploits in the wild or an available patch at this time.

Successful exploitation allows an attacker to execute arbitrary scripts in the browsers of other users, potentially leading to theft of sensitive information, session hijacking, or unauthorized actions performed on behalf of the victim user. The confidentiality and integrity impacts are high, while availability impact is low. The vulnerability requires the attacker to have some privileges and user interaction to trigger the exploit. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently referenced, users should monitor vendor communications for updates. Until a fix is available, consider restricting user input that can be rendered in web pages or applying web application firewall (WAF) rules to detect and block XSS payloads relevant to this product. Avoid granting unnecessary privileges to users to reduce risk.