This vulnerability in Theme Freesia Pixgraphy (up to version 1.3.8) involves improper neutralization of input during web page generation, classified as CWE-79 (Cross-site Scripting). It allows stored XSS attacks where malicious scripts can be injected and executed in the context of the affected website. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low complexity, requires low privileges, and user interaction, and can impact confidentiality, integrity, and availability to a limited extent.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected website, potentially leading to information disclosure, modification of site content, or disruption of service. The impact is rated medium based on the CVSS score of 6.5. There are no reports of active exploitation in the wild.

No official patch or remediation is currently available. Users should monitor the vendor's advisory channels for updates. Until a fix is released, limiting user privileges and exercising caution with user-generated content may reduce risk. Avoid enabling untrusted users to submit content that could be rendered without proper sanitization.