This vulnerability in brijeshk89 IP Based Login plugin allows stored XSS due to improper input neutralization during web page generation. It affects versions up to 2.4.2. The vulnerability can be exploited remotely over the network but requires high privileges and user interaction. The impact includes limited confidentiality, integrity, and availability consequences as indicated by the CVSS vector. No known exploits are reported in the wild, and no patch or official remediation information is currently available.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the context of other users, potentially leading to limited data disclosure, modification, or disruption of service. The impact is limited by the requirement for high privileges and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, restrict access to the affected plugin to trusted users only and consider disabling the plugin if feasible to reduce risk.