This vulnerability in WP Socio's WP Telegram Widget and Join Link plugin allows reflected cross-site scripting due to improper input neutralization during web page generation. It affects all versions up to 2.2.13. The CVSS 3.1 base score is 7.1, indicating high severity, with attack vector network, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No patch or vendor advisory is currently available, and no known exploits have been reported.

Successful exploitation of this reflected XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected website, potentially leading to data disclosure, session hijacking, or other impacts on confidentiality, integrity, and availability. The CVSS vector indicates a high impact on these security properties. However, no known exploits are currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling or removing the affected plugin or applying web application firewall (WAF) rules to block malicious input patterns related to this vulnerability. Monitor vendor communications for updates.