This vulnerability in Barn2 Plugins Document Library Lite (<= 1.1.7) involves improper neutralization of input during web page generation, leading to a DOM-based Cross-site Scripting (XSS) issue. The CVSS 3.1 base score is 5.9 (medium), with attack vector network, low attack complexity, requiring high privileges and user interaction, and impacts confidentiality, integrity, and availability at a low level. The vulnerability allows malicious scripts to be executed in the context of the affected web application, potentially leading to unauthorized actions or data exposure.

Successful exploitation could allow an attacker with high privileges and user interaction to execute arbitrary scripts in the context of the affected application, potentially leading to limited confidentiality, integrity, and availability impacts. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user access and avoid interacting with untrusted input within the affected plugin. Monitor for vendor updates regarding patches or official mitigations.