The vulnerability identified as CVE-2026-97253 in Kreatura LayerSlider is a reflected cross-site scripting (XSS) flaw caused by improper neutralization of input during web page generation. This allows an attacker to inject malicious scripts that are reflected back to users, potentially leading to session hijacking, data theft, or other malicious actions. The issue affects LayerSlider versions up to 8.4.0.

Successful exploitation of this vulnerability can lead to partial compromise of confidentiality, integrity, and availability of the affected system due to reflected XSS attacks. This may allow attackers to execute arbitrary scripts in users' browsers, potentially stealing sensitive information or performing unauthorized actions within the context of the vulnerable application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, users should consider applying input validation and output encoding as temporary mitigations where feasible.