This vulnerability involves stored XSS in Autodesk Fusion 2603.0 where malicious HTML embedded in a component description can execute when clicked by a user. Exploitation could lead to arbitrary code execution or unauthorized local file access within the application's process context. The CVSS 3.1 vector indicates it is remotely exploitable without privileges, requires user interaction, and impacts confidentiality and integrity with high severity.

Successful exploitation can lead to execution of arbitrary code or unauthorized reading of local files by leveraging the stored XSS flaw. This compromises the confidentiality and integrity of the affected system as the attacker gains code execution capabilities within the application context. Availability is not impacted. No known exploits have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when interacting with untrusted component descriptions in Autodesk Fusion. Avoid clicking suspicious or unexpected content embedded in component descriptions.