This vulnerability in yudleethemes City Store (versions <= 1.4.5) involves improper neutralization of input during web page generation, leading to a DOM-based Cross-site Scripting (XSS) issue. The flaw allows an attacker with low privileges and requiring user interaction to potentially execute scripts that impact confidentiality, integrity, and availability to a limited extent. The CVSS vector indicates network attack vector, low attack complexity, privileges required, user interaction required, and a scope change.

Exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the victim's browser, potentially leading to limited disclosure of information, modification of data, or disruption of service within the scope of the affected application. The impact is rated medium based on the CVSS score of 6.5. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users should monitor vendor communications for updates. Until a patch is available, consider limiting user privileges and educating users about the risks of interacting with untrusted content within the application context.