This vulnerability in Poco Blogger Image Import (up to version 2.1) involves improper neutralization of input during web page generation, resulting in a stored Cross-site Scripting (XSS) flaw. The CVSS 3.1 base score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed. Successful exploitation can lead to partial compromise of confidentiality, integrity, and availability of the affected system or user session.

Exploitation of this vulnerability allows an attacker to inject and store malicious scripts that execute in the context of users' browsers when they view affected pages. This can lead to partial disclosure of sensitive information, unauthorized modification of data, and disruption of service availability. The CVSS score reflects these combined impacts as low confidentiality, integrity, and availability impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor vendor communications for updates. Until a patch is available, consider restricting or sanitizing user input related to image import functionality as a temporary measure.