This vulnerability in richplugins Rich Showcase for Google Reviews widget-google-reviews allows stored XSS due to improper input neutralization during web page generation. It affects versions through 6.9.4.3. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and impacts confidentiality, integrity, and availability at a low level. No patch or official remediation information is provided in the available data.

Successful exploitation could allow an attacker with high privileges and user interaction to inject and execute malicious scripts in the context of the affected web application, potentially leading to partial compromise of confidentiality, integrity, and availability of the affected system or user data. However, the impact is rated medium and no known exploits are reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high privilege user access and limit user interactions with untrusted content in the affected widget. Monitor vendor channels for updates.