The vulnerability CVE-2025-22342 affects the WP Simple Sitemap plugin by Jenst, specifically versions up to 0.2. It is a CSRF issue that enables stored XSS attacks, allowing an attacker to trick an authenticated user into submitting a forged request that results in malicious script storage. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction, and it impacts confidentiality, integrity, and availability to a limited extent.

Successful exploitation can lead to stored XSS, which may allow attackers to execute arbitrary scripts in the context of the affected site, potentially compromising user data and site integrity. The vulnerability affects confidentiality, integrity, and availability, but no known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the affected plugin version or applying any available temporary mitigations recommended by the vendor. Monitor for updates from Jenst regarding patches or security advisories.