Perials Simple Social Share plugin versions up to 3.0 suffer from a stored cross-site scripting (XSS) vulnerability (CWE-79) due to improper input sanitization during web page generation. This flaw allows attackers with high privileges to inject malicious scripts that execute in the context of other users viewing the affected pages. The vulnerability has a CVSS 3.1 base score of 5.9, reflecting network attack vector, low attack complexity, required privileges, and user interaction. No official patch or remediation level has been published by the vendor. The vulnerability is not related to a cloud service and no known active exploitation has been documented.

Successful exploitation of this vulnerability could allow an attacker with high privileges to execute arbitrary scripts in the context of other users, potentially leading to limited confidentiality, integrity, and availability impacts. Since it is a stored XSS, malicious payloads could persist and affect multiple users. However, exploitation requires user interaction and elevated privileges, which reduces the overall risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user access to trusted individuals only and consider applying web application firewall (WAF) rules to detect and block XSS payloads targeting this plugin. Monitor vendor channels for updates regarding patches or official mitigations.