This vulnerability in Mapro Collins Coming Soon Countdown plugin allows reflected cross-site scripting due to improper input neutralization during web page generation. It affects versions up to 2.2 and can be exploited remotely without authentication. The CVSS 3.1 base score is 7.1, indicating high severity, with impacts on confidentiality, integrity, and availability. No patch or vendor advisory is currently available, and no known exploits have been reported.

Successful exploitation of this reflected XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to information disclosure, session hijacking, or other impacts on confidentiality, integrity, and availability. However, exploitation requires user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider applying input validation or output encoding workarounds if feasible. Monitor vendor communications for updates on official fixes.