This vulnerability in Emilia Projects Progress Planner is a CWE-79 type stored cross-site scripting issue caused by improper input neutralization during web page generation. It affects Progress Planner versions through 1.9.0. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, user interaction needed, and impacts confidentiality, integrity, and availability at a low level. No patch or official remediation level has been published, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the context of other users, potentially leading to limited confidentiality, integrity, and availability impacts. The vulnerability requires user interaction and high privileges, reducing the likelihood of widespread exploitation. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict high-privilege user access and exercise caution with user-generated content. Monitor vendor communications for updates on patches or official mitigations.