The vulnerability CVE-2025-23659 involves a CSRF flaw in the hernanjh MercadoLibre Integration plugin (versions <= 1.1). This flaw enables attackers to trick authenticated users into executing unwanted actions, which can result in stored XSS attacks. The CVSS score of 7.1 indicates a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed. The vulnerability affects confidentiality, integrity, and availability at a low level. No known exploits in the wild or patch information is currently available.

Successful exploitation could allow attackers to execute stored XSS attacks via CSRF, potentially leading to unauthorized actions performed with the privileges of the victim user. This impacts the confidentiality, integrity, and availability of the affected system to a limited degree. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or limiting use of the affected MercadoLibre Integration plugin versions <= 1.1. Implementing standard CSRF protections and input validation may help mitigate risk, but no vendor-provided mitigation details are currently available.