This vulnerability in MultiVendorX WC Marketplace allows an attacker with low privileges and requiring user interaction to inject stored malicious scripts due to improper input sanitization during web page generation. The flaw affects all versions up to 4.1.3. The CVSS vector indicates network attack vector, low attack complexity, privileges required, user interaction required, and impacts confidentiality, integrity, and availability at a low level. No official fix or patch has been published yet.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of users viewing the affected pages, potentially leading to data disclosure, modification, or disruption of service. The impact is rated medium based on the CVSS score and the nature of stored XSS vulnerabilities. There are no reports of active exploitation in the wild.

No official patch or remediation is currently available. Users should monitor the vendor's advisory channels for updates. Until a fix is released, limiting user privileges and restricting input fields that accept user-generated content may reduce risk. Avoid clicking on suspicious links or interacting with untrusted content within the affected plugin environment.