This vulnerability in the enguerranws Related Post Shortcode plugin allows an attacker with high privileges and user interaction to inject and store malicious scripts due to improper input neutralization during web page generation. When other users view the affected pages, the stored scripts can execute, potentially leading to limited confidentiality, integrity, and availability impacts as indicated by the CVSS vector (AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L). The issue affects all versions up to 1.2. No patch or fix information is currently available.

Successful exploitation can lead to stored XSS attacks, which may allow attackers to execute arbitrary scripts in the context of affected users. This can result in limited confidentiality, integrity, and availability impacts, such as session hijacking or content manipulation. The attack requires high privileges and user interaction, which reduces the risk somewhat. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to users with high privileges and limit exposure to untrusted input in the Related Post Shortcode plugin. Monitor vendor channels for updates and apply official patches once released.