This vulnerability (CVE-2024-43278) in Phi Phan Meta Field Block involves improper neutralization of input during web page generation, classified as CWE-79 (Cross-site Scripting). It allows stored XSS attacks, where malicious scripts can be injected and persistently stored, potentially affecting users who view the compromised content. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, user interaction needed, and impacts confidentiality, integrity, and availability to a limited extent. The affected product versions include all up to 1.2.13. No patch or official remediation level has been published yet.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of users viewing the affected Meta Field Block content. This can lead to limited confidentiality, integrity, and availability impacts such as session hijacking, defacement, or other malicious actions within the affected application context. The attack requires user interaction and low privileges, limiting the ease of exploitation. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting access to the vulnerable Meta Field Block functionality and apply any available input sanitization or filtering measures at the application level. Monitor vendor channels for updates and apply patches promptly once available.