This vulnerability involves improper neutralization of input in the Posts Footer Manager plugin by Data443 Risk Mitigation, Inc., leading to stored cross-site scripting (XSS). It affects versions up to 2.1.0. The vulnerability requires an attacker with high privileges and user interaction to exploit, potentially resulting in limited confidentiality, integrity, and availability impacts. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and a scope change. No patch or official fix information is provided in the available data.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that are stored and executed in the context of users viewing affected pages. This may lead to limited confidentiality, integrity, and availability impacts as indicated by the CVSS score. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit user privileges to reduce risk and avoid interacting with untrusted input in the Posts Footer Manager plugin. Monitor vendor channels for updates regarding patches or mitigations.