The bug lies in Appsmith’s SQL query editor autocomplete, which renders database object names into innerHTML without sanitization. An authenticated developer can create malicious table or column names that embed JavaScript. When another workspace member interacts with the same datasource, the stored script is executed in their browser, causing persistent cross‑site scripting that can compromise the confidentiality, integrity, and availability of the session.

The vulnerability affects installations of Appsmith that are running versions prior to the v2.1 release referenced in the advisory. The issue was addressed in commit 99d6918 and the corresponding pull request, and is fixed in releases tagged v2.1 and later.

The CVSS score of 6.3 indicates a moderate severity. The exploit requires only that the attacker has a developer role with access to the SQL editor and the ability to create database objects. No network or privilege escalation barriers are noted, and the attack vector is local to the application. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting it is not a widely leveraged public exploit, but the impact for affected workspaces remains significant.