A Cross-Site Scripting (XSS) vulnerability exists in WPMU DEV Forminator through version 1.58.3 due to improper neutralization of script-related HTML tags. This flaw allows an attacker with low privileges to inject code that can be executed in the context of the affected web page. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity level. No public exploits or patches are currently documented.