This vulnerability in covertnine C9 Blocks (<= 1.7.7) involves improper neutralization of input during web page generation, leading to a DOM-based Cross-site Scripting (XSS) flaw. The CVSS 3.1 score is 6.5 (medium), reflecting that the attack vector is network-based, requires low attack complexity, privileges, and user interaction, and impacts confidentiality, integrity, and availability to a limited extent. No official patch or remediation details are provided in the available data.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to limited confidentiality, integrity, and availability impacts. The vulnerability requires user interaction and some privileges, which reduces the overall risk. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted input and consider applying any recommended workarounds from the vendor. Monitor the vendor's communications for updates on patches or mitigations.