The vulnerability identified as CVE-2025-22690 affects DigiTimber DigiTimber cPanel Integration (up to version 1.4.6). It is a Cross-Site Request Forgery (CSRF) issue that enables stored Cross-Site Scripting (XSS) attacks. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity, no privileges required, but requires user interaction. The vulnerability impacts confidentiality, integrity, and availability to a limited extent. No known exploits in the wild or patch information is currently available.

Successful exploitation of this vulnerability could allow an attacker to trick an authenticated user into submitting a forged request, which may result in stored XSS. This can lead to limited confidentiality, integrity, and availability impacts as indicated by the CVSS score. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted content and consider implementing CSRF protections such as anti-CSRF tokens or same-site cookies if possible. Monitor vendor communications for updates regarding patches or official mitigations.