The PE Easy Slider plugin for DJ-Extensions.com contains a stored cross-site scripting vulnerability due to improper input neutralization during web page generation. This flaw affects all versions up to 1.1.0 and allows attackers with high privileges to inject malicious scripts that can execute in the context of other users. The vulnerability has a CVSS 3.1 score of 5.9, reflecting medium severity with network attack vector, low attack complexity, required high privileges, and user interaction needed. No patch or official remediation information is currently available.

Successful exploitation of this vulnerability could allow an attacker with high privileges to execute arbitrary scripts in the context of other users, potentially leading to limited confidentiality, integrity, and availability impacts. The stored nature of the XSS means malicious payloads can persist and affect multiple users. However, exploitation requires high privileges and user interaction, which limits the risk somewhat.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the plugin to trusted users only and consider disabling or removing the affected plugin version to prevent exploitation.