This vulnerability is a stored XSS flaw caused by improper input neutralization in DigitalCourt's Marketer Addons plugin. Malicious scripts can be stored and delivered to any visitor who views affected content, potentially compromising session integrity, stealing credentials, or defacing pages. The CVE description focuses on the flaw itself; the specific downstream consequences are inferred from common XSS outcomes.

The defect affects DigitalCourt's Marketer Addons plugin version 1.0.1 and older. WordPress sites that have installed this plugin and present the affected content to users are at risk. No other products or versions are explicitly listed.

The CVSS score of 6.5 reflects moderate severity, while the EPSS score of less than 1% indicates a low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog. Attackers would likely inject malicious payloads through the plugin's content editing interface, a scenario inferred from typical administrative access requirements, since the CVE text does not specify an explicit attack path. Successful exploitation requires a victim to visit the stored content, making the threat dependent on user interaction.