This vulnerability in Amauri WPMobile.App (wpappninja) is a Stored XSS issue caused by improper input sanitization during web page generation. It affects all versions up to 11.48. An attacker could inject malicious scripts that persist and execute in the context of users visiting the affected pages. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) indicates the attack can be performed remotely with low attack complexity, requires user interaction, and impacts integrity without affecting confidentiality or availability.

Successful exploitation allows an attacker to execute malicious scripts in the context of users' browsers, potentially leading to unauthorized actions performed on behalf of the user or manipulation of displayed content. There is no direct impact on confidentiality or availability reported. No known exploits are currently observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for updates from Amauri regarding WPMobile.App. Until a fix is available, consider restricting or sanitizing user input where possible and limiting exposure to untrusted users. Avoid clicking on suspicious links that may trigger the vulnerability.