A stored XSS vulnerability in Kovah LinkAce versions prior to 2.3.1 permits authenticated attackers to execute arbitrary JavaScript in the context of administrative sessions, posing a significant risk of account compromise.

This is a stored cross-site scripting (CWE-79) vulnerability occurring on the /system/audit page. An authenticated attacker can inject a malicious payload into their username field, which executes when an administrator views the audit logs.

Successful exploitation allows an attacker to perform actions on behalf of an administrator, potentially leading to unauthorized data access, account takeover, or configuration changes within the application. Given the CVSS score of 7.3, this high-severity flaw represents a substantial risk to the integrity and confidentiality of the self-hosted archive environment.

Immediate Action: Update the LinkAce instance to version 2.3.1 or later immediately to apply the required input sanitization patches.

Proactive Monitoring: Audit access logs for unusual activity on the /system/audit page and monitor for anomalous modifications to user profile settings.

Compensating Controls: Implement a Content Security Policy (CSP) to restrict the execution of unauthorized scripts and utilize a Web Application Firewall (WAF) to detect and block common XSS injection patterns.

Public Exploit Available: Yes, a public proof-of-concept exists on GitHub.

The presence of a public proof-of-concept combined with the potential for administrative account compromise necessitates urgent attention. Administrators should prioritize upgrading to version 2.3.1 to fully remediate the underlying sanitization flaw and prevent potential cross-site scripting attacks against privileged users.