This vulnerability involves improper neutralization of input during web page generation in HUMANIST Digital Human Resources, leading to stored cross-site scripting (CWE-79). It affects version 26.0 prior to 26.1. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, user interaction required, scope changed, and low impact on confidentiality and integrity with no impact on availability.

An attacker could exploit this stored XSS vulnerability to inject malicious scripts that execute in the context of other users' browsers, potentially leading to information disclosure or manipulation of user interactions. The impact is limited to low confidentiality and integrity impacts, with no availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should apply standard XSS mitigations such as input validation and output encoding where possible.