This vulnerability (CVE-2025-23919) affects Ella Van Durpe Slides & Presentations software through version 0.0.39. It is caused by improper neutralization of script-related HTML tags in web pages, resulting in a basic cross-site scripting (XSS) flaw. The CVSS 3.1 base score is 5.4 (medium severity), with an attack vector of network, low attack complexity, requiring low privileges and no user interaction. The flaw impacts integrity and availability but not confidentiality. No patch or vendor advisory information is provided, and the software is not a cloud service.

The vulnerability allows an attacker with low privileges to inject malicious scripts into web pages served by the affected software, potentially leading to code injection that can affect the integrity and availability of the application. Confidentiality is not impacted according to the CVSS vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or vendor advisory is available, users should monitor for updates from Ella Van Durpe and apply any official fixes once released. Until then, consider applying input validation or sanitization controls if possible to mitigate XSS risks.