The Delay Redirects plugin (version <= 1.0.0) by jagdish1o1 contains a DOM-based Cross-site Scripting vulnerability caused by improper neutralization of input during web page generation. This allows an attacker with high privileges and requiring user interaction to inject malicious scripts, potentially impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 5.9, reflecting medium severity. There is no indication of known exploits in the wild or available patches at this time.

Successful exploitation can lead to limited compromise of confidentiality, integrity, and availability of affected systems. The attack requires high privileges and user interaction, which reduces the likelihood of exploitation. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the plugin to trusted users and avoid exposing it to untrusted inputs. Monitor vendor channels for updates.