This vulnerability in CodexThemes TheGem theme (versions <= 5.10.5) is due to improper neutralization of input during web page generation, resulting in a cross-site scripting (XSS) flaw. The CVSS 3.1 base score is 6.5 (medium severity) with attack vector network, low attack complexity, requiring low privileges and user interaction, and impacts confidentiality, integrity, and availability in a limited manner. No known exploits in the wild or patches are currently documented in the provided data.

Successful exploitation could allow an attacker with low privileges and requiring user interaction to execute arbitrary scripts in the context of the affected web application, potentially leading to partial disclosure of information, modification of data, or disruption of service. The impact is rated medium based on the CVSS score of 6.5.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Users should monitor CodexThemes advisories for updates and apply any official fixes once available.