This vulnerability in wpsoul Greenshift plugin versions up to 11.0.2 involves improper neutralization of input during web page generation, leading to stored cross-site scripting (XSS). An attacker with low privileges and requiring user interaction could exploit this to execute arbitrary scripts in the context of affected users. The vulnerability has a CVSS 3.1 base score of 6.5, reflecting network attack vector, low attack complexity, privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No patch or vendor advisory details are provided, and the product is not a cloud service.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of users viewing the affected pages, potentially leading to data disclosure, modification, or disruption of availability. The impact is rated medium based on the CVSS score of 6.5. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with input handling and consider limiting privileges of users who can submit content. Monitor vendor channels for updates and apply patches promptly once available.