The vulnerability CVE-2025-23444 in nasir179125 Scroll Top Advanced involves improper neutralization of input during web page generation, leading to stored cross-site scripting (XSS). This allows an attacker to inject malicious scripts that are stored by the application and later executed in the context of users visiting affected pages. The issue affects all versions up to 2.5. No CVSS score or detailed technical exploit information is provided. No patch or vendor advisory is currently available.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of users' browsers, potentially leading to session hijacking, defacement, or other malicious actions depending on the victim's privileges and environment. However, no known exploits are reported in the wild, and the exact impact depends on the deployment context.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the affected plugin version or applying any available temporary mitigations recommended by the vendor. Monitor vendor channels for updates.