This vulnerability involves improper neutralization of user-controllable input before it is included in web page output in Splunk Enterprise and Splunk Cloud Platform. A low-privileged user can embed malicious JavaScript in classic dashboard HTML panels. When another user views the affected dashboard, the script executes in their browser, potentially compromising confidentiality, integrity, and availability. Exploitation requires user interaction via phishing. The CVSS 3.1 base score is 7.1, indicating high severity with network attack vector, high impact on confidentiality, integrity, and availability, but requiring high attack complexity and user interaction.

Successful exploitation can lead to unauthorized JavaScript execution in the browsers of other users, potentially resulting in data theft, session hijacking, or other malicious actions affecting confidentiality, integrity, and availability of the affected system. However, exploitation requires social engineering and a low-privileged user with access to create or modify classic dashboard HTML panels.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor the vendor's security advisories for updates. Until a fix is available, restrict dashboard editing permissions to trusted users and educate users to be cautious of phishing attempts that could trigger exploitation.