This vulnerability in xtemos WoodMart involves improper neutralization of script-related HTML tags, leading to a basic cross-site scripting (XSS) flaw. It affects versions up to 8.3.7 and allows an attacker to inject code into web pages. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with a low attack complexity. The impact is limited to a confidentiality loss, without integrity or availability impact. No patch or vendor advisory is currently provided, and no known exploits have been reported.

An attacker can inject script code into affected WoodMart web pages, potentially leading to disclosure of sensitive information accessible in the context of the victim's browser session. The impact is limited to confidentiality loss, with no direct integrity or availability consequences reported. The vulnerability does not require user interaction or privileges to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying any available workarounds or input sanitization measures at the application level to mitigate XSS risks. Monitor vendor channels for updates regarding patches or official mitigation instructions.