This vulnerability, identified as CWE-79, is a cross-site scripting (XSS) flaw in Supreme Modules Lite versions up to and including 2.5.63. The issue arises from improper neutralization of input during web page generation, allowing an attacker with high privileges and requiring user interaction to potentially execute malicious scripts. The CVSS 3.1 score is 5.9, indicating medium severity with network attack vector, low attack complexity, high privileges required, and user interaction needed. The impact includes limited confidentiality, integrity, and availability loss.

An attacker with high privileges and requiring user interaction could exploit this vulnerability to execute malicious scripts in the context of the affected application. This may lead to partial compromise of confidentiality, integrity, and availability of the system or data handled by Supreme Modules Lite. However, no known exploits in the wild have been reported.

No official patch or remediation information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit exposure by restricting high privilege access and exercising caution with user interactions involving the affected application.