This vulnerability in Modern Minds Magento 2 WordPress Integration (m2wp) allows an attacker with high privileges to inject and store malicious scripts due to improper input sanitization during web page generation. When these scripts are executed in the context of other users, it can lead to limited confidentiality, integrity, and availability impacts. The issue affects all versions up to 1.4.2.1. No known exploits are reported in the wild, and no official patch or remediation guidance has been provided yet.

Successful exploitation could allow an attacker with high privileges to execute stored cross-site scripting attacks, potentially leading to limited compromise of user data confidentiality, integrity, and availability within the affected application context. The impact is rated medium based on the CVSS score of 5.9.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to high-privilege users and validate or sanitize inputs where possible to reduce risk.