This vulnerability in the Advanced Blog Post Block plugin by Best WP Developer involves improper neutralization of input during web page generation, leading to stored cross-site scripting (XSS). The affected versions are up to 1.0.4. The CVSS vector indicates the attack can be performed remotely over the network with low complexity, requires low privileges, and user interaction, and impacts confidentiality, integrity, and availability to a limited extent. No patch or official remediation guidance has been provided yet.

Successful exploitation could allow an attacker to inject and execute malicious scripts in the context of users viewing the affected blog post block, potentially leading to data disclosure, session hijacking, or other impacts on confidentiality, integrity, and availability. However, exploitation requires user interaction and low privileges, limiting the overall impact severity to medium.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the affected plugin or disabling it if feasible. Monitor for updates from the vendor or security advisories to apply patches promptly once available.