CVE-2026-66623 is an unauthenticated Cross Site Scripting (XSS) vulnerability affecting Social Media & Share Icons software versions up to 2.9.9. The vulnerability is classified under CWE-79 and has a CVSS 3.1 base score of 7.1, indicating high severity. The attack vector is network-based with low attack complexity, no privileges required, and requires user interaction. The vulnerability impacts confidentiality, integrity, and availability to a limited extent. No patch or remediation information is currently provided, and no known exploits are reported in the wild.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to limited confidentiality, integrity, and availability impacts such as session hijacking, defacement, or denial of service. The vulnerability does not require authentication, increasing the risk of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider applying input validation or output encoding workarounds if feasible. Monitor official sources for updates and apply any official fixes once released.