This vulnerability in Eli Anti-Malware Security and Brute-Force Firewall allows reflected Cross-site Scripting (XSS) due to improper input neutralization during web page generation. The issue affects all versions up to and including 4.23.89. The CVSS vector indicates the attack requires network access, high attack complexity, no privileges, and user interaction, with a scope change and low impact on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, and no known exploits exist at this time.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to information disclosure, session hijacking, or other client-side impacts. The overall impact is rated as medium severity with limited confidentiality, integrity, and availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should apply standard web application security best practices such as input validation and output encoding where possible. Monitor official Eli communications for updates on patches or mitigations.