SourceCodester Safety Anger Pad 1.0 contains a cross-site scripting vulnerability due to improper sanitization or validation of the 'angerDisplay' argument in an unspecified function. This allows remote attackers to inject and execute arbitrary scripts in the context of the affected application. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity, with attack vector network, low attack complexity, no privileges required, and user interaction needed. No vendor advisory or patch information is provided, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the victim's browser, potentially leading to session hijacking, defacement, or other client-side impacts. However, the impact is limited by the requirement for user interaction and the lack of privilege escalation or confidentiality/integrity impact. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying input validation or output encoding on the 'angerDisplay' parameter if possible. Monitoring for updates from SourceCodester is recommended. No vendor advisory or official fix has been published yet.