This vulnerability in Qibo CMS 1.0 affects the Internal Message Module, enabling remote attackers to conduct cross-site scripting attacks by manipulating an unspecified functionality. The vulnerability has a CVSS 4.0 base score of 5.1, indicating medium severity with network attack vector, low attack complexity, no privileges required, and user interaction needed. The vendor has not provided any fix or advisory, and the exploit has been made public, increasing the risk of exploitation.

Successful exploitation of this vulnerability could allow attackers to execute arbitrary scripts in the context of the affected CMS, potentially leading to session hijacking, defacement, or other malicious actions within the scope of the vulnerable module. However, the impact is limited by the need for user interaction and the vulnerability's medium severity rating.

No official patch or remediation is currently available from the vendor. Users of Qibo CMS 1.0 should consider implementing web application firewalls or input sanitization controls as temporary mitigations. Monitor for updates from the vendor or community for any forthcoming patches or official guidance. Avoid exposing the Internal Message Module to untrusted users if possible.