The vulnerability CVE-2025-22820 affects goldsounds VR Views (versions up to 1.5.1) and is classified as a stored cross-site scripting (XSS) flaw. It results from improper neutralization of input during web page generation, which can lead to the injection and persistent storage of malicious scripts. The CVSS 3.1 vector indicates the attack requires network access, low attack complexity, low privileges, and user interaction, with impacts on confidentiality, integrity, and availability rated as low to low and low respectively. No patch or official remediation information is provided in the available data.

Successful exploitation of this stored XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of users interacting with the affected VR Views content. This may lead to partial compromise of confidentiality, integrity, and availability of the affected system or user data. However, no known exploits in the wild have been reported, and the vulnerability requires user interaction and some privileges to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when interacting with untrusted content in goldsounds VR Views. Monitor vendor communications for updates regarding patches or mitigations.