This vulnerability (CVE-2024-22158) in PeepSo Community by PeepSo is a stored cross-site scripting (CWE-79) issue caused by improper input sanitization during web page generation. It allows attackers with at least low privileges and requiring user interaction to inject malicious scripts that can affect confidentiality, integrity, and availability to a limited extent. The vulnerability affects versions prior to 6.3.1.0 and has a CVSS 3.1 base score of 6.5 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L). No patch or official remediation guidance is currently documented.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to limited confidentiality, integrity, and availability impacts. Because it is a stored XSS, malicious payloads could persist and affect multiple users. The attack requires at least low privileges and user interaction, reducing the ease of exploitation. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should apply strict input validation and output encoding where possible and consider limiting user privileges to reduce risk. Monitor official PeepSo channels for updates and patches addressing this vulnerability.