This vulnerability involves improper neutralization of input during web page generation (CWE-79) in PAN-OS software used on PA-Series, VM-Series firewalls, and Panorama (virtual and M-Series). An authenticated administrator can inject and store malicious JavaScript code through the web interface, leading to stored cross-site scripting. The Cloud NGFW and Prisma Access products are not affected. The CVSS 4.0 vector indicates network attack vector, low attack complexity, high privileges required, and user interaction needed, with low confidentiality impact but high integrity and availability impacts. No patch or official remediation guidance is currently available.

An authenticated administrator could exploit this vulnerability to inject malicious JavaScript code that is stored and executed in the context of the web interface. This could potentially lead to unauthorized actions or manipulation of the management interface. The impact is limited by the requirement for high privileges and user interaction. Cloud NGFW and Prisma Access are not affected, limiting exposure to those specific PAN-OS deployments.

Patch status is not yet confirmed — check the Palo Alto Networks vendor advisory for current remediation guidance. Until an official fix is released, restrict administrative access to trusted personnel only and monitor for suspicious activity. Since no official remediation level or patch is provided, no definitive mitigation steps can be recommended beyond limiting access and following vendor updates.