The vulnerability CVE-2025-23555 affects the chenyenming Ui Slider Filter By Price plugin (versions up to 1.1) and is caused by improper neutralization of input during web page generation, resulting in a reflected Cross-site Scripting (XSS) flaw. This allows an attacker to inject malicious scripts via crafted input that is reflected in the web page output. The CVSS score is 7.1 (high severity) with vector AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicating network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and impacts on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to execution of arbitrary scripts in the context of the affected web application, potentially allowing attackers to steal user data, manipulate content, or disrupt service. The reflected XSS can affect confidentiality, integrity, and availability of the application and its users. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — no patch or vendor advisory information is currently available. Users should monitor the vendor's official channels for updates and apply any official fixes once released. In the meantime, consider implementing web application firewall (WAF) rules to detect and block reflected XSS attempts as a temporary mitigation.