This vulnerability in Bricksable for Bricks Builder is classified as CWE-79 (Improper Neutralization of Input During Web Page Generation), which enables stored cross-site scripting (XSS). The flaw allows attackers with high privileges and requiring user interaction to inject malicious scripts that can impact confidentiality, integrity, and availability. The affected versions include all releases up to 1.6.83. There is no vendor advisory or patch available yet, and no known exploits have been reported.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the context of other users, potentially leading to data disclosure, modification, or disruption of service. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and impacts on confidentiality, integrity, and availability, all at low levels.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit exposure by restricting user privileges and carefully validating and sanitizing inputs where possible. Monitor vendor channels for updates and apply patches promptly once available.