This vulnerability involves a cross-site scripting issue in the user documentation field of ANOW! Automate v3.3.1.90 by Beta Systems Software AG. An attacker can inject malicious scripts that execute arbitrary code when processed by the application. The vulnerability is specific to version 3.3.1.90. No further technical details, CVSS metrics, or vendor advisories are currently available.

Successful exploitation could allow a remote attacker to execute arbitrary code in the context of the affected application, potentially leading to unauthorized actions or data compromise within the scope of the application. The exact impact depends on the privileges of the application and the environment in which it runs. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the user documentation field or sanitizing inputs to mitigate injection of malicious scripts.