A stored cross‑site scripting flaw in Cisco Prime Infrastructure's web‑based management interface allows an attacker with administrative credentials to inject malicious scripts into specific data fields. When the stored data is later displayed to other users, the attacker‑supplied code executes in the users' browsers, potentially granting the attacker the ability to run arbitrary code or capture browser‑based information. The flaw arises from insufficient input validation and is classified as CWE‑79 and CWE‑798.

Cisco Prime Infrastructure systems, including version 3.10.6 update01 and earlier releases, are susceptible to this vulnerability. The issue is present in the web interface across all supported configurations where users can input or edit data through the management portal.

The CVSS score of 4.8 indicates moderate severity. EPSS shows a likelihood of exploitation below 1%, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires the attacker to already possess valid administrative credentials to insert malicious data. Without privileged access, the vulnerability cannot be leveraged. Given the low EPSS and lack of public exploitation evidence, the risk is moderate but not critical.