The vulnerability identified as CVE-2025-22685 affects the CheGevara29 Tags to Keywords plugin (versions up to 1.0.1). It is a Cross-Site Request Forgery (CSRF) issue that enables Stored Cross-Site Scripting (XSS) attacks. This means an attacker can trick a user into submitting unauthorized requests that result in malicious script storage, potentially impacting confidentiality, integrity, and availability. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction, and it affects confidentiality, integrity, and availability to a limited degree.

Successful exploitation of this vulnerability can lead to stored XSS, which may allow attackers to execute malicious scripts in the context of the victim's browser. This can result in data theft, session hijacking, or other malicious actions impacting confidentiality, integrity, and availability. The CVSS score of 7.1 reflects a high severity level due to the combined CSRF and stored XSS impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting the use of the affected plugin to prevent exploitation. Monitoring vendor channels for updates is recommended.