CVE-2025-14063 is a reflected cross-site scripting vulnerability in the SEO Links Interlinking plugin for WordPress affecting all versions up to 1.7.9.9.1. The issue stems from improper neutralization of input in the 'google_error' parameter, enabling unauthenticated attackers to inject and execute arbitrary web scripts in the context of the affected site. This vulnerability requires user interaction (clicking a crafted link) and can lead to limited confidentiality and integrity impacts but no availability impact. The CVSS 3.1 base score is 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). No patch or vendor advisory is currently available.

Successful exploitation allows an unauthenticated attacker to perform reflected XSS attacks, potentially leading to limited disclosure of information or manipulation of web content in the context of the victim's browser session. The vulnerability does not impact system availability. There are no known exploits in the wild, and the impact is limited to confidentiality and integrity at the user session level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or removing the SEO Links Interlinking plugin or applying custom input sanitization and output escaping for the 'google_error' parameter. Monitor vendor channels for updates and patches.