This vulnerability in emarket-design's Request a Quote component allows an attacker with limited privileges and requiring user interaction to inject and store malicious scripts via improperly sanitized input fields. When other users view the affected pages, the stored scripts can execute, potentially leading to partial confidentiality, integrity, and availability impacts as indicated by the CVSS vector (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L). The issue affects versions up to 2.5.0.

Successful exploitation can lead to stored XSS attacks, which may allow attackers to execute arbitrary scripts in the context of affected users, potentially resulting in partial disclosure of information, modification of data, or disruption of service. The vulnerability requires user interaction and some privileges, and it affects confidentiality, integrity, and availability to a limited extent.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider applying input validation and output encoding controls as temporary mitigations to reduce risk.