This vulnerability in wpbakery Templatera (up to version 2.3.0) arises from improper neutralization of input during web page generation, enabling DOM-based cross-site scripting (XSS). An attacker with low privileges and requiring user interaction could exploit this to execute arbitrary scripts in the context of the affected web application, potentially impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 6.5, reflecting a medium severity level with network attack vector, low attack complexity, and partial impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to execute arbitrary scripts in the victim's browser, potentially leading to partial disclosure of information, modification of data, or disruption of service within the context of the affected application. The attack requires user interaction and low privileges, limiting the ease of exploitation but still posing a notable risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider limiting exposure by restricting access to trusted users and exercising caution with untrusted input. Monitor vendor channels for updates and apply patches promptly once released.