This vulnerability involves improper neutralization of input during web page generation in the spamBlocker module of WatchGuard Fireware OS, allowing stored XSS attacks. Exploitation requires an authenticated administrator session on a locally managed Firebox device. The affected versions include Fireware OS from 12.0 through 12.5.12+701324 and from 12.6 through 12.11. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, scope changed, and low impact on confidentiality and integrity, with no impact on availability.

An attacker with authenticated administrator access to a locally managed Firebox can exploit this vulnerability to execute stored cross-site scripting attacks. This may allow the attacker to execute arbitrary scripts in the context of the administrator's browser session, potentially leading to information disclosure or manipulation of the administrative interface. There is no indication of impact on system availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this vulnerability requires authenticated administrator access, limiting administrative access and monitoring for suspicious activity can reduce risk until a patch is available.