The KeepInMind WordPress plugin version 0.8.4.2 and earlier is vulnerable to stored cross-site scripting (XSS). This vulnerability allows attackers to inject malicious scripts that persist in the application and execute in the context of other users viewing the affected content. The vulnerability affects versions up to and including 0.8.4.2. There is no vendor advisory or patch information available in the provided data. No known active exploitation has been reported. The classification confidence is moderate (0.5) based on limited technical details.

Successful exploitation of this stored XSS vulnerability could allow attackers to execute arbitrary scripts in the context of users' browsers, potentially leading to session hijacking, defacement, or other client-side attacks. However, no active exploits are currently known in the wild, and the impact is limited to users interacting with the vulnerable plugin's stored content.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or removing the KeepInMind plugin version 0.8.4.2 or earlier to prevent exploitation. Monitor the official plugin page for updates or security patches.