This vulnerability involves improper neutralization of input in the Ultimate Image Hover Effects plugin by themebon, leading to a DOM-based XSS condition. The flaw affects versions up to 1.1.2 and can be triggered by an attacker with low privileges and requiring user interaction. The CVSS score of 6.5 reflects a medium severity with potential impacts on confidentiality, integrity, and availability. No patch or official remediation guidance is currently provided.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to partial compromise of confidentiality, integrity, and availability. However, exploitation requires user interaction and low privileges, which limits the scope and ease of attack. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider restricting user input that interacts with the affected plugin or applying web application firewall (WAF) rules to detect and block XSS attempts related to this component.