This vulnerability in Radware Cyber Controller affects versions up to 10.11.0 and is located in the HTML Report Generation component. It allows an attacker with low privileges to perform HTML injection via cross-site scripting, potentially enabling remote exploitation when a user interacts with malicious content. The CVSS 4.0 base score is 5.1, indicating medium severity. No official remediation or patch has been disclosed by the vendor, and the exploit details have been publicly disclosed.

Successful exploitation could allow an attacker to inject arbitrary HTML content in the affected component, potentially leading to cross-site scripting attacks. This may result in user interface manipulation or other client-side impacts. The vulnerability requires user interaction and low privileges, limiting the scope of impact. There is no indication of privilege escalation or direct system compromise from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should monitor official Radware channels for updates. In the meantime, limit exposure by restricting access to the affected component and exercising caution with untrusted input in report generation.