This vulnerability in PixelYourSite – Your smart PIXEL (TAG) Manager (versions up to 11.2.0.1) involves improper neutralization of input during web page generation, resulting in stored cross-site scripting (XSS). An attacker can inject malicious scripts that persist and execute when other users access the affected content. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) reflects a network exploitable vulnerability with low complexity, no privileges required, but requiring user interaction, and impacts confidentiality, integrity, and availability to a limited extent. No patch or official remediation guidance is currently provided.

Successful exploitation can lead to execution of arbitrary scripts in the context of affected users, potentially allowing theft of sensitive information, session hijacking, or other client-side impacts. The vulnerability affects confidentiality, integrity, and availability at a low level. There are no known active exploits reported. The vulnerability does not affect cloud services and is limited to the specified product versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should exercise caution with untrusted input and consider temporary mitigations such as input validation or disabling vulnerable features if feasible. Monitor official PixelYourSite channels for updates and apply patches promptly once released.