This vulnerability in Aviplugins Videos (<= 1.0.5) involves improper neutralization of script-related HTML tags, leading to reflected XSS. An attacker can craft a malicious link that, when visited by a user, executes arbitrary scripts in the context of the victim's browser session. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and impacts on confidentiality, integrity, and availability at low to low levels. No patch or official remediation has been published yet.

Successful exploitation could allow an attacker to execute arbitrary scripts in the victim's browser, potentially leading to information disclosure, session hijacking, or other client-side impacts. The reflected nature requires user interaction. The overall impact is rated high due to the potential for confidentiality, integrity, and availability impacts, though no active exploits are known.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with untrusted links and consider implementing web application firewall (WAF) rules to detect and block reflected XSS attempts if possible. No official vendor mitigation or temporary fix is currently documented.