The Maidul Dynamic Post Grid Elementor Addon version 1.0.6 and earlier contains a DOM-based cross-site scripting vulnerability caused by improper neutralization of input during web page generation. This flaw allows an attacker with low privileges and requiring user interaction to inject malicious scripts, potentially leading to partial compromise of confidentiality, integrity, and availability of affected systems. The CVSS 3.1 base score is 6.5, reflecting a medium severity level. No known exploits in the wild have been reported, and no patch or remediation details are currently available.

Successful exploitation of this vulnerability can lead to execution of arbitrary scripts in the context of the affected web application, potentially allowing attackers to steal sensitive information, manipulate content, or disrupt service. The impact affects confidentiality, integrity, and availability but is limited by the requirement for user interaction and low privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider limiting exposure by restricting access to the affected plugin or disabling it if feasible. Monitor vendor channels for updates and apply patches promptly once released.