This vulnerability, identified as CWE-79, is a cross-site scripting (XSS) issue in WP Data Access software versions up to 5.5.79. It arises from improper input neutralization during web page generation, which could allow an attacker with high privileges and requiring user interaction to execute arbitrary scripts in the context of the affected application. The CVSS 3.1 base score is 5.9, reflecting network attack vector, low attack complexity, high privileges required, user interaction needed, and impacts on confidentiality, integrity, and availability. No patch or official remediation level has been published yet.

Successful exploitation could lead to partial compromise of confidentiality, integrity, and availability of the affected system. The attacker must have high privileges and user interaction is required, limiting the ease of exploitation. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit exposure by restricting high privilege user access and exercising caution with user interactions that could trigger the vulnerability.