This vulnerability involves improper neutralization of input during web page generation (CWE-94) in Talend Administration Center 8.0. Specifically, an attacker who has permission to manage servers can store a malicious XSS payload. This payload can then be triggered when another user accesses the affected interface, potentially leading to script execution in the context of the victim's browser session. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requires privileges, user interaction, and impacts confidentiality and integrity with no impact on availability.

Successful exploitation allows an attacker with management privileges to inject stored scripts that execute in other users' browsers, potentially leading to unauthorized actions or data disclosure within the application context. The impact is limited to confidentiality and integrity with no direct availability impact. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict server management permissions to trusted users only and consider monitoring for suspicious activity related to stored content. Avoid interacting with untrusted content in the Talend Administration Center interface.