This vulnerability in DELUCKS SEO plugin (versions <= 2.7.0) involves improper neutralization of input during web page generation, resulting in stored cross-site scripting (XSS). An attacker could inject malicious scripts that are stored and later executed in the browsers of users who access the affected content. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring privileges and user interaction, with a scope change and low impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of users viewing the affected web pages, potentially leading to session hijacking, defacement, or other malicious actions. The impact is rated medium due to the need for user interaction and privileges, and the limited confidentiality, integrity, and availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting privileges and user interactions that could trigger the vulnerability and monitor for suspicious activity related to stored XSS. Avoid using affected versions if possible.