This vulnerability in Atlas Gondal's Export Media URLs component allows reflected XSS due to improper input neutralization during web page generation. An attacker could exploit this by crafting a malicious URL that, when visited by a user, executes arbitrary scripts in the context of the victim's browser. The issue affects versions up to 2.2. The CVSS 3.1 vector indicates it is remotely exploitable without privileges but requires user interaction. The vulnerability impacts confidentiality, integrity, and availability to a limited extent. No official patch or remediation information is provided in the available data.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of a user's browser, potentially leading to information disclosure, session hijacking, or other impacts on confidentiality, integrity, and availability. The CVSS score of 7.1 reflects a high severity level. However, no known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should exercise caution when interacting with URLs generated by the Export Media URLs component and consider implementing web application firewall (WAF) rules to detect and block reflected XSS attempts. Avoid clicking on suspicious links and ensure input validation and output encoding are applied if possible in custom deployments.