A cross-site scripting (XSS) vulnerability exists in SolarWinds Observability Self-Hosted affecting user-created URL fields. Exploitation requires authentication with a low-level account. The vulnerability has a medium severity score of 5.4 and impacts confidentiality and integrity without affecting availability.