This vulnerability in Kodex Posts likes plugin allows an attacker to inject malicious scripts due to improper input sanitization during web page generation. The issue affects all versions up to 2.5.0. The CVSS vector indicates that the attack requires network access, low attack complexity, privileges, and user interaction, with impacts on confidentiality, integrity, and availability at a low level. No patch or official fix has been documented in the provided data.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to limited confidentiality, integrity, and availability impacts. The medium severity reflects the moderate risk posed by this vulnerability, considering the required privileges and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting privileges and limiting user interactions with untrusted content related to the Kodex Posts likes plugin. Monitor vendor channels for updates.