The vulnerability CVE-2025-30627 in regolithsjk Elegant Visitor Counter (<= 3.1) is a stored cross-site scripting flaw caused by improper input neutralization during web page generation. This allows attackers with high privileges to inject malicious scripts that execute in the context of users who view the affected pages. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges are high, user interaction is required, and the scope is changed with low impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in other users' browsers, potentially leading to information disclosure, session hijacking, or other client-side impacts. The overall impact is rated medium with low confidentiality, integrity, and availability impacts. There are no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, restrict high-privilege user access and validate or sanitize inputs manually where possible to reduce risk. Monitor vendor channels for updates regarding a fix.