This vulnerability in Garrett Grimm Simple Popup (up to version 4.4) is a stored XSS issue caused by improper input sanitization during web page generation. An attacker with high privileges and requiring user interaction can inject malicious scripts that execute in a different security context, potentially leading to limited confidentiality, integrity, and availability impacts. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and scope change.

Successful exploitation can lead to execution of arbitrary scripts in the context of other users, potentially exposing sensitive information, modifying content, or causing denial of service. The impact is rated medium with partial loss of confidentiality, integrity, and availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict high-privilege user access to the plugin and monitor for suspicious activity. Avoid relying on user input that could be stored and rendered by the plugin.