This vulnerability in the Last Updated Shortcode plugin (versions <= 1.0.1) involves improper neutralization of input during web page generation, leading to stored cross-site scripting (XSS). An attacker could inject malicious scripts that are stored and later executed in the context of users viewing the affected pages. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring privileges and user interaction, with impact on confidentiality, integrity, and availability at a low to medium level. No patch or official fix information is provided in the available data.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of affected users, potentially leading to information disclosure, modification of content, or disruption of service. The impact is rated medium with partial confidentiality, integrity, and availability impacts. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should consider disabling or removing the Last Updated Shortcode plugin if feasible. Implementing web application firewalls or input sanitization at other layers may provide some mitigation but are not direct fixes for this vulnerability.