This vulnerability in PowerPack Lite for Beaver Builder allows an attacker with high privileges and requiring user interaction to exploit improper input neutralization during web page generation, resulting in cross-site scripting. The affected versions include all releases up to 1.3.0.4. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and impacts confidentiality, integrity, and availability to a limited extent.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to limited confidentiality, integrity, and availability impacts. However, exploitation requires high privileges and user interaction, which reduces the overall risk. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, limit exposure by restricting high-privilege user access and exercising caution with user interactions that could trigger the vulnerability.