Improper neutralization of input during web page generation allows a cross‑site scripting vulnerability in Microsoft Edge (Chromium-based). An attacker with authorized access can inject content that the browser renders, enabling spoofing of web pages or services. The vulnerability represents a high‑severity security weakness that could mislead users and compromise the trust model of web content.

Microsoft Edge (Chromium-based). No specific version range is specified in the data, so the issue may affect multiple releases of the Chromium‑based Edge browser.

The CVSS score of 8.8 indicates a high severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector involves an authorized attacker manipulating web page generation, which may require the ability to serve malicious content over a network. The exploitation conditions are moderate, but the potential impact on user trust and data integrity is significant.