This vulnerability in pgn4web Embed Chessboard (<= 3.08.00) involves improper neutralization of input during web page generation, leading to stored cross-site scripting (XSS). An attacker can inject malicious scripts that are stored and later executed in the context of users viewing the affected web pages. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, and user interaction needed, with impacts on confidentiality, integrity, and availability rated as low.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of affected users, potentially leading to information disclosure, session hijacking, or other client-side impacts. The overall impact is rated medium due to the stored nature of the XSS and the potential for persistent exploitation. There are no known active exploits reported at this time.

No official patch or remediation is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should consider applying input validation or output encoding as a temporary mitigation if feasible. Monitor vendor communications for updates on patches or official fixes.