This vulnerability is a CWE-79 type stored Cross-site Scripting issue in DELMIA Service Process Engineer's Process Experience Studio. It affects multiple recent releases (R2024x to R2026x) and allows an attacker to inject malicious scripts that execute in the context of a victim's browser session. The CVSS 3.1 score of 8.7 indicates high impact on confidentiality and integrity, with network attack vector, low attack complexity, requiring privileges and user interaction, and scope change. No vendor-provided patch or mitigation details are currently available.

Successful exploitation could lead to execution of arbitrary script code in the context of the victim's browser session, potentially compromising user confidentiality and integrity of data accessible through the application. Availability impact is not indicated. The vulnerability requires the attacker to have some privileges and the victim to interact with malicious content.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with untrusted input and avoid interacting with suspicious content within the affected application. Monitor vendor communications for updates on patches or mitigations.