This vulnerability in Bastien Ho Event post allows stored cross-site scripting due to improper input neutralization during web page generation. An attacker with low privileges can inject malicious scripts that execute when other users view the affected content. The vulnerability affects versions up to 5.10.1. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, user interaction required, and impacts confidentiality, integrity, and availability to a limited extent. No patch or remediation details have been provided.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to limited confidentiality, integrity, and availability impacts. This could result in session hijacking, defacement, or other user-targeted attacks. However, exploitation requires user interaction and low privileges, limiting the scope and ease of attack.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with untrusted input and consider temporary mitigations such as input validation or disabling the affected plugin if feasible.