This vulnerability, identified as CWE-79, involves improper neutralization of input during web page generation in LIBRID/LIBREF by Ankaref Innovation and Technology Inc. It allows stored cross-site scripting (XSS), which can lead to script execution in the context of the affected web application. The affected version explicitly stated is 2.01.0.2183. The vendor has not provided any response or patch information. The CVSS 3.1 base score is 5.4, indicating a medium severity with network attack vector, low attack complexity, requiring privileges and user interaction, and impacts on confidentiality and integrity with scope changed.

Successful exploitation of this vulnerability could allow an attacker with some privileges to inject malicious scripts that are stored and later executed in users' browsers. This can lead to partial compromise of confidentiality and integrity of data within the affected application context. There is no indication of impact on availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should consider mitigating risk by restricting privileges, validating and sanitizing inputs where possible, and monitoring for suspicious activity related to stored XSS. Avoid exposing the vulnerable version in untrusted environments until a fix is released.