This vulnerability in Posts Footer Manager (<= 2.2.0) involves improper input sanitization leading to stored cross-site scripting (XSS). Attackers could inject malicious scripts that are stored and later executed in users' browsers when they view affected content. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and impacts confidentiality, integrity, and availability at a low level.

Successful exploitation could allow an attacker with high privileges and user interaction to execute arbitrary scripts in the context of other users, potentially leading to information disclosure, modification of content, or disruption of availability. The impact is rated medium severity with low confidentiality, integrity, and availability impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to high-privilege users and limit user interactions that could trigger the vulnerability. Monitor vendor channels for updates and apply patches promptly once released.