This vulnerability involves improper input sanitization in the MailZen Management Portal by Soliton Systems, specifically in versions 2.62 and 2.63. An attacker can inject malicious scripts through the Role Name, First Name, Last Name, and Username fields, leading to Cross Site Scripting attacks. The vulnerability is publicly disclosed but lacks detailed vendor remediation guidance or a CVSS score at this time.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to session hijacking, unauthorized actions, or data exposure within the MailZen Management Portal. However, no active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when handling input data and consider applying web application firewall rules or input validation controls if possible.