The vulnerability CVE-2025-22570 affects the mdjekic Inline Tweets plugin (versions up to 2.0) and is classified as Stored Cross-site Scripting (XSS) due to improper input neutralization during web page generation. This allows attackers to inject malicious scripts that persist and execute in the context of users visiting affected pages. The CVSS 3.1 base score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability at low to low levels. No patch or vendor advisory detailing remediation is currently provided in the input data.

Successful exploitation of this vulnerability can lead to execution of arbitrary scripts in the context of affected users, potentially resulting in partial loss of confidentiality, integrity, and availability of user data or application functionality. The impact is rated as high severity based on the CVSS score of 7.1. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or removing the affected Inline Tweets plugin to mitigate risk. Monitor vendor channels for updates regarding patches or official mitigations.