This vulnerability in Magnetic Creative's Inline Click To Tweet plugin allows DOM-based XSS due to improper input neutralization during web page generation. It affects versions up to 1.0.0 and requires low privileges and user interaction to exploit. The CVSS score is 6.5 (medium severity) with network attack vector, low attack complexity, and impacts confidentiality, integrity, and availability to a limited extent. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to limited confidentiality, integrity, and availability impacts. The attack requires user interaction and low privileges, which somewhat limits the risk. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider disabling or restricting use of the Inline Click To Tweet plugin to mitigate risk. Monitor vendor channels for updates and apply any official patches promptly once released.