This vulnerability in WP Recipe Maker arises from improper sanitization of script-related HTML tags, enabling an attacker to inject malicious code into web pages generated by the plugin. The issue affects all versions before 10.1.0. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity, no privileges or user interaction required, and limited confidentiality impact. No official patch or remediation details are available from the vendor or other sources at this time.

Successful exploitation could allow an attacker to inject script code into web pages, potentially leading to limited confidentiality impact such as theft of user data or session information. The vulnerability does not impact integrity or availability. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider disabling or limiting use of the affected plugin version. Monitor official Brecht or WP Recipe Maker channels for updates and apply any released patches promptly.