CVE-2025-22589 describes a CSRF vulnerability in the bozdoz Quote Tweet application that enables Stored XSS attacks. The affected versions are from 0 through 0.7. The vulnerability allows an attacker to trick an authenticated user into submitting a request that stores malicious script code, which can then be executed in the context of other users. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and impacts on confidentiality, integrity, and availability at a low level.

Successful exploitation of this vulnerability could allow attackers to execute stored malicious scripts in users' browsers, potentially leading to session hijacking, data theft, or other unauthorized actions. The vulnerability affects confidentiality, integrity, and availability at a low level. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, users should consider implementing CSRF protections such as anti-CSRF tokens and input validation to mitigate risk.