The vulnerability CVE-2025-30536 affects zeitwesentech Beautiful Link Preview (<= 1.5.0) and involves improper neutralization of input during web page generation, resulting in stored cross-site scripting (XSS). This allows an attacker with high privileges and user interaction to inject malicious scripts that execute in the context of other users. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and impacts on confidentiality, integrity, and availability at a low level.

Successful exploitation of this stored XSS vulnerability can lead to limited compromise of confidentiality, integrity, and availability of the affected application. Attackers may execute arbitrary scripts in users' browsers, potentially leading to session hijacking, defacement, or other malicious actions. However, exploitation requires high privileges and user interaction, which reduces the overall risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should apply strict input validation and output encoding as a temporary mitigation. Monitor vendor communications for updates and apply patches promptly once available.