This vulnerability (CVE-2026-19447) is a stored cross-site scripting (CWE-79) flaw in FileOrbis software by Fileorbis Informatics Services Trade Inc. It arises from improper neutralization of input during web page generation, which can lead to the injection and execution of malicious scripts in the context of the affected web application. The vulnerability affects all versions prior to 16.5. The CVSS 3.1 vector indicates it is remotely exploitable over the network with low attack complexity, requires low privileges and user interaction, and impacts confidentiality and integrity with no availability impact.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to unauthorized disclosure or modification of information accessible to the user. The impact is limited to confidentiality and integrity, with no direct availability impact. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users should monitor vendor communications for updates. Until a patch is available, consider applying input validation or output encoding workarounds if feasible.