This vulnerability in Meow Gallery (<= 5.2.7) allows stored cross-site scripting due to improper input neutralization during web page generation. An attacker with at least high privileges and requiring user interaction could inject malicious scripts that execute in the context of other users, potentially leading to limited confidentiality, integrity, and availability impacts. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and scope changed.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of other users, potentially leading to limited information disclosure, modification of data, or disruption of availability within the affected application. The impact is limited by the requirement for high privileges and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to the affected versions and limit user privileges to reduce risk. Monitor official Jordy Meow advisories for updates and apply any official fixes once released.