This vulnerability involves improper neutralization of input in the MK Google Directions plugin, leading to a DOM-based XSS issue. The flaw affects versions up to 3.1.1 and allows malicious input to be executed as script code within the victim's browser. No official remediation or patch information is currently available, and no known exploits have been reported. The plugin is not a cloud service, so remediation depends on vendor updates.

Successful exploitation could enable an attacker to execute arbitrary JavaScript in the context of the affected web application, potentially leading to session hijacking, defacement, or other client-side attacks. However, no active exploitation has been reported, and the overall impact depends on the deployment context of the plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider disabling or restricting use of the affected plugin version or applying input validation and sanitization controls where possible.