This vulnerability (CWE-79) in Logo Software Industry and Trade Inc.'s e-Logo Purchasing Portal allows stored cross-site scripting due to improper input neutralization during web page generation. Attackers can inject malicious scripts that are stored and later executed in the context of other users' browsers, potentially leading to information disclosure or session hijacking. The issue affects all versions prior to 1.52 of the product. No official patch or remediation level has been provided yet, and no known exploits are reported in the wild.

Successful exploitation could allow an attacker with low privileges and requiring user interaction to execute arbitrary scripts in the context of another user's browser session. This can lead to limited confidentiality and integrity impacts, such as theft of user data or session tokens. There is no impact on availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted input and consider implementing web application firewall rules or input sanitization as temporary mitigations.