This vulnerability in FileOrbis allows an attacker to inject malicious scripts that are stored and later executed in the context of a user's browser when viewing affected web pages. The root cause is improper input neutralization during web page generation, classified under CWE-79. The issue affects all versions prior to 16.5 of FileOrbis. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring low privileges and user interaction, with a scope change and limited confidentiality and integrity impact but no availability impact.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to data theft or session hijacking. The impact is limited to confidentiality and integrity with no availability impact. The vulnerability requires some user interaction and low privileges to exploit.

No explicit patch or remediation information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with untrusted input and consider applying any available vendor updates once released.