This vulnerability in councilsoft Content Grid Slider (versions <= 1.5) involves improper neutralization of input during web page generation, leading to reflected cross-site scripting (XSS). The CVSS 3.1 base score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed. Successful exploitation could result in partial confidentiality, integrity, and availability impacts.

Exploitation of this reflected XSS vulnerability could allow attackers to execute arbitrary scripts in the context of the affected web application, potentially leading to theft of user data, session hijacking, or other malicious actions affecting confidentiality, integrity, and availability. The CVSS score reflects a high impact with partial loss in these areas. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying temporary mitigations such as input validation or output encoding where possible. Monitor for updates from councilsoft regarding patches or official fixes.