This vulnerability (CVE-2026-65544) is an unauthenticated cross-site scripting (XSS) issue in Super Socializer versions up to 7.14.5. It arises from improper neutralization of input during web page generation (CWE-79). The flaw allows an attacker to inject malicious scripts that can execute in the context of the victim's browser, potentially leading to information disclosure, data manipulation, or denial of service. The CVSS 3.1 base score is 7.1, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed. No known exploits in the wild or vendor remediation details are currently available.

The vulnerability allows unauthenticated attackers to perform cross-site scripting attacks, which can lead to partial compromise of confidentiality, integrity, and availability of the affected system or user data. The scope of impact is changed, meaning the vulnerability affects components beyond the initially vulnerable component. The CVSS score of 7.1 reflects a high severity risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying any available workarounds or temporary mitigations recommended by the vendor. Monitoring vendor communications for updates is advised.