This vulnerability in Slider by Supsystic (up to version 1.8.10) is classified as CWE-79, indicating improper neutralization of input during web page generation leading to stored cross-site scripting (XSS). An attacker with high privileges and requiring user interaction can exploit this to inject malicious scripts that may affect confidentiality, integrity, and availability to a limited extent. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, and user interaction needed, with partial impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker with high privileges to inject and store malicious scripts that execute in the context of other users viewing the affected pages. This may lead to limited disclosure of information, modification of data, or disruption of service. The impact is rated as medium severity, reflecting partial compromise of confidentiality, integrity, and availability.

No official patch or remediation is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should limit high privilege access and be cautious with user input handling in the affected plugin. Monitor vendor communications for updates on patches or mitigations.