This vulnerability in boldthemes Bold Page Builder (<= 5.3.0) is a stored cross-site scripting (XSS) issue caused by improper neutralization of input during web page generation. An attacker with high privileges and requiring user interaction could exploit this to execute arbitrary scripts in the context of affected users. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and impacts on confidentiality, integrity, and availability at a low level.

Successful exploitation could lead to execution of arbitrary scripts in the context of users interacting with the affected web pages, potentially resulting in limited confidentiality, integrity, and availability impacts. The attacker must have high privileges and user interaction is required, which limits the scope of exploitation. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit high privilege access to the Bold Page Builder plugin and exercise caution with user input handling. Monitor vendor channels for updates regarding patches or official mitigations.