This vulnerability (CVE-2025-23645) in Optimize Worldwide Find Content IDs (<= 1.0) is caused by improper neutralization of input during web page generation, resulting in a reflected cross-site scripting (XSS) issue. The CVSS 3.1 base score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and impacts on confidentiality, integrity, and availability. The vulnerability allows an attacker to inject malicious scripts that execute in the victim's browser when they visit a crafted URL or web page generated by the affected product.

Successful exploitation of this reflected XSS vulnerability can lead to partial compromise of confidentiality, integrity, and availability of the affected system or user session. Attackers may execute arbitrary scripts in the context of the victim's browser, potentially stealing sensitive information, modifying content, or disrupting service. However, no known exploits have been observed in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is available, users should monitor vendor communications for updates. Until a fix is released, consider applying input validation or output encoding workarounds if feasible, and educate users to avoid clicking suspicious links related to the affected product.