This vulnerability involves improper input sanitization in the Imran Emu Logo Slider and related products, leading to stored cross-site scripting (XSS). Attackers can inject malicious scripts that are stored and later executed in the context of users viewing affected pages. The affected versions are up to 1.8.1. The CVSS vector indicates the attack requires network access, low attack complexity, high privileges, and user interaction, with impacts on confidentiality, integrity, and availability rated as low to low and low respectively. No patch or remediation information is currently provided.

Successful exploitation could allow an attacker with high privileges and requiring user interaction to execute arbitrary scripts in the context of affected users, potentially leading to data disclosure, manipulation, or denial of service. The impact is rated medium severity with limited confidentiality, integrity, and availability impacts. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should limit exposure by restricting high-privilege access to the affected components and exercising caution with user input. Monitor vendor channels for updates and apply patches promptly once released.