This vulnerability (CVE-2025-0420) in Paraşüt Software Paraşüt is classified as CWE-79, indicating improper neutralization of input during web page generation, which leads to Cross-Site Scripting (XSS). The CVSS 3.1 base score is 4.7 (medium), with network attack vector, low attack complexity, requiring high privileges, no user interaction, and impacts on confidentiality, integrity, and availability. The affected versions include 0.0.0.65efa44e through 20250204. No patch or vendor advisory is currently provided, and the product is not a cloud service.

Successful exploitation could allow an attacker with high privileges to execute arbitrary scripts in the context of the affected application, potentially leading to limited confidentiality, integrity, and availability impacts. However, exploitation requires high privileges, reducing the likelihood of remote exploitation by low-privileged users. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix is currently available, users should monitor vendor communications for updates. Given the requirement for high privileges to exploit, restricting access to trusted users and reviewing input handling may reduce risk until a fix is released.