A Stored Cross-site Scripting vulnerability in the IRIS web application allows authenticated users to inject malicious scripts, potentially leading to unauthorized actions or data theft.

The application is susceptible to a Stored Cross-site Scripting (CWE-79) vulnerability where input is not properly neutralized before being stored and rendered in the web interface. This requires an authenticated user to perform the injection, which is then executed in the browser of other users who view the affected content.

The CVSS score of 7.6 indicates a high risk to the platform, as stored XSS is particularly dangerous because it can affect any user who views the compromised data. This could lead to the theft of session cookies, administrative account takeover, or the modification of sensitive incident response data within the application.

Immediate Action: Check the official repository for the latest security release and apply updates as soon as they become available.

Proactive Monitoring: Review audit logs for suspicious activity involving the injection of script tags or unusual input patterns within the web interface.

Compensating Controls: Utilize a Web Application Firewall to detect and block common XSS payloads, and enforce strict input validation policies on all user-controlled fields.

Public Exploit Available: No

The existence of a proof-of-concept elevates the risk profile of this vulnerability. Administrators should monitor the vendor repository for the official patch and apply it immediately to prevent potential exploitation in their environment.