This vulnerability in Kaira Blockons involves improper neutralization of input during web page generation, leading to stored cross-site scripting (XSS). Affected versions include all versions up to 1.2.19. The vulnerability allows an attacker with low privileges and requiring user interaction to inject malicious scripts that can impact confidentiality, integrity, and availability to a limited extent. The CVSS vector indicates network attack vector, low attack complexity, privileges required, user interaction required, and scope change.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to limited confidentiality, integrity, and availability impacts. The medium severity reflects that exploitation requires some user interaction and privileges, and the impact is limited rather than critical.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the current data. Until a fix is available, cautious handling of user input and limiting privileges may reduce risk.