This vulnerability in RadiusTheme Classified Listing (<= 5.0.0) is due to improper neutralization of script-related HTML tags in web pages, enabling basic cross-site scripting (XSS) attacks. The CVSS 3.1 score is 5.4 (medium), with an attack vector of network, low attack complexity, requiring privileges and user interaction, and impacts on integrity and availability but not confidentiality. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation could allow an attacker with low privileges and requiring user interaction to inject malicious scripts, potentially affecting the integrity and availability of the application or its users. Confidentiality is not impacted according to the CVSS vector. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with user input and consider implementing additional input validation or content security policies as temporary mitigations.