This vulnerability, identified as CWE-79, affects Wise Chat software versions up to 3.4. It allows a contributor-level user to inject malicious scripts due to improper input sanitization during web page generation. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, required privileges, user interaction, and impacts on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no vendor advisory or patch information is currently available.

Successful exploitation could allow an attacker with contributor privileges to execute arbitrary scripts in the context of other users, potentially leading to data disclosure, modification, or denial of service. The vulnerability impacts confidentiality, integrity, and availability to a limited extent as indicated by the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting contributor privileges or applying web application firewall rules to detect and block malicious input patterns related to XSS.