This vulnerability in HT Plugins HT Team Member (<= 1.1.7) is a stored cross-site scripting issue caused by improper input neutralization during web page generation. An attacker with low privileges can inject malicious scripts that are stored and later executed in the browsers of users who view the affected content. The CVSS 3.1 score of 6.5 reflects the network attack vector, low attack complexity, required privileges, and user interaction, with partial impact on confidentiality, integrity, and availability. No patch or official fix information is provided in the available data.

Successful exploitation allows an attacker to execute arbitrary scripts in the context of users viewing the affected pages, potentially leading to session hijacking, information disclosure, or other client-side impacts. The vulnerability affects confidentiality, integrity, and availability to a limited degree as indicated by the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting user input or applying web application firewall (WAF) rules to detect and block malicious payloads related to stored XSS in the HT Team Member plugin. Monitor vendor channels for updates and patches.