This vulnerability in digitalnature Mystique (up to version 2.5.7) is due to improper input sanitization leading to stored XSS (CWE-79). An attacker can inject malicious scripts that are stored by the application and later executed in the context of other users' browsers. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring low privileges and user interaction, with impact on confidentiality, integrity, and availability at a low to medium level. No official remediation or patch has been published yet.

Successful exploitation allows an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to theft of sensitive information, session hijacking, or other malicious actions affecting confidentiality, integrity, and availability. The impact is rated medium based on the CVSS score of 6.5. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider applying web application firewall (WAF) rules to detect and block XSS payloads and review input validation and output encoding practices in their deployment of Mystique. Monitor vendor channels for updates regarding official patches or mitigations.