The title indicates that the KeepInMind Dashboard Notes plugin, before version 0.8.4.2, includes a stored XSS flaw exploitable by users with contributor or higher roles. An attacker can craft a note containing malicious script that is saved and later rendered in the browser of any user viewing the note, allowing hijacking of sessions, defacement, or data exfiltration. The impact is a compromise of confidentiality, integrity, and availability of the web application. These technical details are inferred from the title, as the description text does not provide explicit information.

Any installation of KeepInMind Dashboard Notes using a version older than 0.8.4.2 is affected. The plugin is listed as Unknown:KeepInMind Dashboard Notes in the CNA data. Since the vulnerability is tied to contributor‑level access, all sites where such users exist are at risk.

The CVSS score of 5.9 indicates moderate severity, and the EPSS score of less than 1 % suggests a low probability of exploitation in the near term. The vulnerability requires authentication but only the contributor role, which is a common role. Based on the title, the likely attack vector is the web interface where contributors submit notes. An attacker who can create a note can exploit the flaw remotely, with the victim's browser executing the injected script. The flaw is not in CISA KEV, but the potential for widespread malicious payloads warrants immediate mitigation.