This vulnerability in the sizam Rehub WordPress theme allows stored cross-site scripting due to improper input neutralization during web page generation. It affects all versions before 19.9.9.1. The vulnerability requires network access, low attack complexity, low privileges, and user interaction, and it can lead to partial compromise of confidentiality, integrity, and availability. No patch or vendor advisory has been provided yet, and no exploits are known publicly.

Successful exploitation can allow an attacker to inject malicious scripts that execute in the context of users viewing the affected web pages, potentially leading to data disclosure, modification, or disruption of service. The impact is rated medium based on the CVSS score of 6.5, reflecting limited but meaningful consequences to confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying workarounds such as input validation or disabling vulnerable features if possible. Monitor official sizam or Rehub theme channels for updates.