This vulnerability in Code Themes Digi Store (<= 1.1.4) involves improper neutralization of input during web page generation, leading to a DOM-based Cross-site Scripting (XSS) flaw. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, requiring privileges and user interaction, and impacts on confidentiality, integrity, and availability. No patch or official remediation level has been published yet, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation could allow an attacker with limited privileges and requiring user interaction to execute arbitrary scripts in the context of the affected web application. This may lead to partial compromise of confidentiality, integrity, and availability of the application or user data. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider limiting exposure of affected versions and apply standard XSS mitigations where possible. Monitor official Code Themes communications for updates.