LogStare Collector has a stored cross-site scripting (XSS) vulnerability in its UserManagement component. This flaw allows an attacker to store malicious scripts in user information, which then execute in the browser of any user who accesses the management page. The vulnerability has a medium severity rating with a CVSS score of 5.4.