This vulnerability in Crossword Compiler Puzzles allows an attacker to inject and store malicious scripts due to improper input neutralization during web page generation. When a user views the affected content, the stored script executes, potentially leading to unauthorized actions or data exposure. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, and user interaction needed, with partial impact on confidentiality, integrity, and availability. Versions up to 14.5 are affected. No patch or official remediation information is currently available.

Successful exploitation can lead to execution of arbitrary scripts in the context of the affected application, potentially allowing attackers to steal user data, perform unauthorized actions, or disrupt service. The impact is limited to partial confidentiality, integrity, and availability loss as per the CVSS vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted input and consider applying any available workarounds recommended by the vendor once published.