CVE-2025-15659 is a CWE-79 cross-site scripting vulnerability in liseperu Elizaibots affecting versions up to 1.0.2. It arises from improper neutralization of input during web page generation, allowing an attacker with low complexity and requiring user interaction to execute malicious scripts. The vulnerability impacts confidentiality, integrity, and availability to a limited extent. No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

Successful exploitation could lead to partial compromise of confidentiality, integrity, and availability of the affected system. The attacker requires low privileges and user interaction to exploit this vulnerability. However, the impact is limited to low-level data disclosure or modification and potential service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor for vendor updates and apply patches once available. Until then, consider restricting user input or employing web application firewalls to mitigate potential exploitation.