This vulnerability in Soli WP Post Signature (<= 0.4.1) allows stored cross-site scripting due to improper input sanitization during web page generation. An attacker with high privileges and requiring user interaction can inject malicious scripts that execute in the context of other users, potentially leading to limited confidentiality, integrity, and availability impacts as reflected by the CVSS vector (AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L). No patch or official remediation guidance is currently provided.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute when other users view the affected content, potentially leading to limited disclosure of information, modification of content, or disruption of availability. The impact is limited by the requirement for high privileges and user interaction, and the scope is changed (S:C) indicating some level of cross-origin impact within the same security context.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict high-privilege user access to trusted individuals only and consider disabling or removing the vulnerable plugin to mitigate risk.