This vulnerability (CVE-2025-22278) in yudleethemes Whitish Lite theme allows stored cross-site scripting due to improper input neutralization during web page generation. The flaw affects all versions up to 2.1.13. An attacker with limited privileges and requiring user interaction can exploit this to execute arbitrary scripts in the context of the affected web application, potentially impacting confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring privileges and user interaction, with a scope change and low impact on confidentiality and integrity but low impact on availability.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of users visiting the affected site, potentially leading to information disclosure, session hijacking, or other impacts on confidentiality, integrity, and availability. The medium severity reflects the need for user interaction and limited privileges for exploitation. No known active exploits have been reported.

No official patch or remediation is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is provided, users should exercise caution with user-generated content and consider applying temporary mitigations such as input sanitization or disabling vulnerable features if feasible.