This vulnerability in Stylish Internal Links (<= 1.9) involves improper neutralization of input during web page generation, leading to a DOM-based XSS issue. The CVSS 3.1 base score is 6.5 (medium), with attack vector network, low attack complexity, requiring privileges and user interaction, and impacts on confidentiality, integrity, and availability at a low level. The vulnerability allows an attacker to inject and execute malicious scripts in the victim's browser within the context of the affected plugin.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to information disclosure, modification of data, or disruption of service. The impact is rated medium with limited confidentiality, integrity, and availability effects. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for updates from the vendor. In the meantime, restricting user privileges and minimizing exposure to untrusted input may reduce risk. Avoiding user interaction with untrusted content can also help mitigate exploitation.