The vulnerability CVE-2025-22823 exists in the Genesis Style Shortcodes plugin by jtwerdy, where improper neutralization of input during web page generation leads to a DOM-based cross-site scripting (XSS) issue. This allows an attacker with low complexity and some privileges to execute script code in the context of the victim's browser, potentially impacting confidentiality, integrity, and availability to a limited extent. The affected versions include all up to 1.0. No patch or official fix information is currently available.

Successful exploitation of this DOM-based XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of users interacting with the affected plugin, potentially leading to limited confidentiality, integrity, and availability impacts. The CVSS score of 6.5 reflects a medium severity with network attack vector, low attack complexity, requiring privileges and user interaction, and scope change.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting privileges and minimizing exposure to the vulnerable plugin. Monitor for updates from the vendor or trusted security sources regarding patches or workarounds.