This vulnerability in BoldGrid Post and Page Builder (<= 1.27.5) involves improper neutralization of input during web page generation, resulting in stored cross-site scripting (XSS). An attacker with low privileges and requiring user interaction can exploit this to execute arbitrary scripts, potentially impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 6.5 (medium severity), with network attack vector, low attack complexity, privileges required, and user interaction needed. No patch or vendor advisory details are provided.

Successful exploitation can lead to stored XSS attacks, allowing attackers to execute arbitrary scripts in the context of affected users. This can result in partial compromise of confidentiality, integrity, and availability of the affected system or user data. The impact is rated medium severity based on the CVSS score of 6.5. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should apply standard mitigations for stored XSS vulnerabilities such as limiting user privileges and avoiding interaction with untrusted content. Monitor official BoldGrid communications for updates on patches or workarounds.