This vulnerability in WP Chill's Gallery PhotoBlocks plugin (<= 1.3.1) involves improper input sanitization during web page generation, leading to Stored Cross-site Scripting (XSS). An attacker with low privileges can inject malicious scripts that are stored and executed in the context of other users, potentially affecting confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges are low, user interaction is required, and scope is changed.

Successful exploitation can result in the execution of arbitrary scripts in the context of the affected web application, potentially leading to information disclosure, modification of content, or disruption of service. The vulnerability impacts confidentiality, integrity, and availability to a limited extent as reflected by the CVSS score of 6.5. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting privileges and limiting user input where possible. Monitor WP Chill's official channels for updates and apply patches promptly once released.