The quantumcloud QC SEO Help plugin for WordPress (including AI Content Writer, RSS Feed to Post, Autoblogging SEO Help features) suffers from a reflected cross-site scripting vulnerability (CWE-79) via the 'page' parameter. This vulnerability affects all versions up to 6.1.3 due to improper neutralization of input during web page generation, enabling injection of arbitrary web scripts that execute when a user clicks a malicious link. The CVSS 3.1 base score is 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N), indicating network attack vector with low attack complexity, no privileges required, user interaction needed, scope changed, and low impact on confidentiality and integrity with no impact on availability. No patch or official fix details are currently available.

Successful exploitation allows unauthenticated attackers to execute arbitrary scripts in the context of the victim's browser session, potentially leading to information disclosure and integrity impacts such as session hijacking or unauthorized actions performed on behalf of the user. There is no impact on system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with links involving the 'page' parameter in affected plugin versions. Consider disabling or removing the plugin if possible to mitigate risk. Monitor vendor channels for updates or patches addressing this vulnerability.