The vulnerability CVE-2025-23875 affects the madeglobal Better Protected Pages plugin (version <= 1.0). It is a CSRF vulnerability that can be leveraged to inject stored XSS payloads. The CVSS vector indicates it is remotely exploitable over the network without privileges, requires user interaction, and impacts confidentiality, integrity, and availability at a low to partial level. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability can allow an attacker to perform unauthorized actions on behalf of an authenticated user, leading to stored XSS attacks. This can result in partial compromise of confidentiality, integrity, and availability of the affected system or user data. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider implementing CSRF protections such as verifying anti-CSRF tokens and restricting user input handling to trusted sources. Monitor vendor channels for updates and apply patches promptly once available.