The WM JqMath plugin for WordPress suffers from a stored XSS vulnerability due to insufficient input sanitization and output escaping of the 'style' attribute in the [jqmath] shortcode. The generate_jqMathFormula() function concatenates the 'style' attribute value directly into an HTML style attribute without applying escaping functions like esc_attr(). Authenticated attackers with Contributor-level access or higher can exploit this to inject malicious scripts that execute when other users access the compromised page. The CVSS 3.1 base score is 6.4 (medium severity), reflecting network attack vector, low attack complexity, required privileges, no user interaction, and impact on confidentiality and integrity but not availability. No patch or official remediation is currently documented.

An attacker with Contributor-level or higher privileges can inject arbitrary JavaScript into pages via the 'style' shortcode attribute, leading to stored XSS. This can compromise the confidentiality and integrity of user sessions or data when other users view the infected pages. The vulnerability does not affect availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict Contributor-level access to trusted users only and consider disabling or removing the WM JqMath plugin if possible. Monitor for updates from the vendor or security community regarding patches or workarounds.