This vulnerability involves improper neutralization of input during web page generation (CWE-79) in GFI MailEssentials AI. Specifically, the ctl00$ContentPlaceHolder1$pv1$TXB_RuleName parameter in the contentchecking.aspx page does not properly sanitize input, enabling stored XSS attacks. An authenticated user can inject malicious scripts that are stored and executed when the management interface renders the stored data. The CVSS 4.0 base score is 5.1, indicating a medium severity vulnerability with network attack vector, low complexity, and requiring low privileges with user interaction.

Successful exploitation allows an authenticated user to execute arbitrary scripts in the context of other logged-in users of the management interface. This can lead to session hijacking, unauthorized actions, or disclosure of sensitive information within the application interface. The vulnerability does not allow privilege escalation or direct remote code execution outside the application context based on the provided data.

No official patch or fix is currently confirmed or linked by the vendor. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the management interface to trusted users only and avoid using untrusted input in the Keyword Filtering rule creation workflow. Monitor vendor communications for updates regarding an official fix.