CVE-2025-23787 describes a reflected cross-site scripting vulnerability in Foxskav Easy Bet (<= 1.0.7) caused by improper input neutralization during web page generation. This vulnerability allows an attacker to inject malicious scripts that execute in the victim's browser when a crafted URL or input is processed, potentially leading to partial compromise of confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.1 (high), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and scope change with low impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can result in the execution of arbitrary scripts in the context of the victim's browser session, potentially leading to theft of sensitive information, session hijacking, or other malicious actions. The impact is rated as high severity with limited confidentiality, integrity, and availability impacts. There are no reports of known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when handling untrusted input and consider implementing web application firewall (WAF) rules to detect and block reflected XSS attempts. Monitor official Foxskav communications for updates and patches.