CVE-2024-43476: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

The user would have to navigate to a page with malicious content to be compromised by the attacker.