This vulnerability involves stored XSS in JeeSite v5.15.1 at the /msg/msgInner/save endpoint. Attackers can inject crafted input into the msgContent parameter, which is then stored and later executed in users' browsers. This can lead to script execution within the application context. The CVE entry does not provide a CVSS score or detailed remediation information, and no patch links are available. The affected version is specified as 5.15.1, but no other version details are provided.

Successful exploitation allows attackers to execute arbitrary scripts or HTML in the victim's browser, potentially leading to session hijacking, defacement, or other client-side attacks. The impact is limited to the scope of the stored XSS vulnerability within the affected endpoint. There is no information about exploitation in the wild or broader systemic impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying input validation or output encoding controls on the msgContent parameter to mitigate injection risks. Monitor vendor channels for updates regarding patches or official mitigations.