This vulnerability, identified as CWE-79, is a cross-site scripting issue in the Shop Manager component of the wpshopmart Tabs plugin versions up to 2.5. It allows an attacker with high privileges and requiring user interaction to execute malicious scripts in a context where input is not properly sanitized. The CVSS 3.1 base score is 5.9, reflecting network attack vector, low attack complexity, high privileges required, user interaction needed, and impacts on confidentiality, integrity, and availability at a low level. No patch or official remediation has been published as of the data provided.

Successful exploitation could allow an attacker with high privileges to execute arbitrary scripts in the context of affected users, potentially leading to limited disclosure of information, modification of data, or disruption of service. The impact is rated medium based on the CVSS score and vector, indicating moderate risk but requiring specific conditions such as user interaction and elevated privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit access to the affected plugin and consider disabling or restricting the Shop Manager Tabs functionality to trusted users only. Monitor vendor channels for updates and apply patches promptly once available.