This vulnerability in HashThemes Mini Ajax Cart for WooCommerce (up to version 1.3.4) is classified as CWE-79, indicating improper neutralization of input during web page generation leading to stored cross-site scripting (XSS). The CVSS 3.1 base score is 5.9, reflecting a medium severity with network attack vector, low attack complexity, requiring high privileges and user interaction, and impacts confidentiality, integrity, and availability. No patch or official remediation level has been published by the vendor, and no known exploits have been reported.

Successful exploitation could allow an attacker with high privileges and user interaction to inject malicious scripts that persist in the affected plugin, potentially impacting confidentiality, integrity, and availability of the affected system. However, the medium CVSS score and requirement for high privileges and user interaction limit the risk to some extent. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider limiting access to trusted users with high privileges and monitor for suspicious activity related to the Mini Ajax Cart plugin. Avoid enabling untrusted user input that could be stored and rendered by the plugin.