This vulnerability (CVE-2025-1071) is a stored XSS issue in WatchGuard Fireware OS 12.0, specifically in the spamBlocker module of the Firebox management interface. An attacker with administrator-level authentication can inject malicious JavaScript code that executes in the context of other management users' sessions, potentially impacting the confidentiality and integrity of the management interface. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required beyond administrator, and partial impact on system integrity and availability.

An authenticated administrator on the Firebox management interface can execute arbitrary JavaScript in other administrators' sessions. This could lead to session hijacking, unauthorized actions within the management interface, or other client-side impacts. However, the vulnerability requires high privileges (administrator) and user interaction (UI required). There is no indication of impact on the underlying system beyond the management interface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit administrator access to trusted users only and avoid sharing management sessions. Monitor vendor communications for updates on patches or official mitigations.