The vulnerability is a reflected cross‑site scripting flaw (CWE‑79) where an attacker can inject arbitrary JavaScript into a URL parameter. When that parameter is reflected in the HTTP response, the malicious code executes in the victim’s browser, enabling session hijacking, credential theft, or other malicious client‑side actions. This type of attack does not directly compromise the server but can severely undermine application security and user trust.

facileManager, a modular suite of web applications used by system administrators, is affected in all releases prior to version 6.0.4. The flaw resides in the fmDNS module and specifically in the log_search_query parameter. Users running any of the vulnerable releases should be aware that these systems are susceptible to the reflected XSS attack.

The CVSS score of 7.6 indicates a high severity risk, while the EPSS score of less than 1% shows that the likelihood of this vulnerability being actively exploited today is low. The vulnerability is not listed in the CISA KEV catalog, suggesting it has not been widely leveraged in known exploits. The attack vector is inferred to be remote via an attacker crafted URL that includes malicious JavaScript in the log_search_query parameter; a victim who follows or is tricked into clicking the link would have the script executed under their browser context.