This vulnerability in artiosmedia RSS Feed Pro (<= 1.1.8) involves improper neutralization of input during web page generation, resulting in a stored cross-site scripting (XSS) flaw. An attacker with high privileges and requiring user interaction can inject malicious scripts that execute in the context of other users, potentially leading to limited confidentiality, integrity, and availability impacts. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and scope changed.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the browsers of users who view the affected content. This can lead to limited confidentiality, integrity, and availability impacts such as session hijacking, defacement, or other malicious actions within the context of the vulnerable application. However, exploitation requires user interaction and high privileges, limiting the overall risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, limit high-privilege user access and avoid interacting with untrusted input in the RSS Feed Pro application. Monitor vendor channels for updates regarding an official fix.