This vulnerability in SeedProd's 'Coming Soon Page, Under Construction & Maintenance Mode' plugin allows stored cross-site scripting due to improper input neutralization during page generation. It affects all versions up to 6.17.4. The attack requires high privileges and user interaction and can lead to partial confidentiality, integrity, and availability impacts. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and scope changed.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the context of users viewing the affected pages, potentially leading to partial compromise of confidentiality, integrity, and availability of the affected system. However, exploitation requires user interaction and high privileges, limiting the attack surface. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit administrative access to trusted users and avoid interacting with untrusted content in the plugin's input fields. Monitor SeedProd's official channels for updates and apply patches promptly once released.