This vulnerability (CVE-2026-57650) is a CWE-79 type cross-site scripting issue found in BlockArt Magazine Blocks versions up to 1.8.3. It arises from improper input neutralization during web page generation, enabling contributor-level users to inject malicious scripts that could affect confidentiality, integrity, and availability to a limited extent. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges at the contributor level, user interaction required, and scope changed. No vendor advisory or patch information is currently available.

Successful exploitation could allow an attacker with contributor privileges to execute arbitrary scripts in the context of the affected application, potentially leading to limited confidentiality, integrity, and availability impacts. The CVSS score of 6.5 reflects a medium severity with partial impact on these security properties. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict contributor privileges where possible and apply input validation or sanitization controls if feasible. Monitor vendor channels for updates regarding patches or official mitigations.