This vulnerability (CVE-2025-22354) in Code Themes Digi Store is classified as CWE-79, indicating improper neutralization of input leading to DOM-based Cross-site Scripting. It affects Digi Store versions through 1.1.4. The CVSS 3.1 score is 6.5 (medium), with attack vector network, low attack complexity, requiring privileges and user interaction, and impacts confidentiality, integrity, and availability to a low extent. No patch or official remediation level has been provided by the vendor, and no known exploits have been reported.

Successful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of the affected web application, potentially leading to partial compromise of confidentiality, integrity, and availability of the affected system. However, exploitation requires some privileges and user interaction, which limits the ease of attack. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying any available workarounds or input validation controls to mitigate DOM-based XSS risks. Monitor vendor communications for updates on patches or official mitigations.