This vulnerability (CVE-2025-2405) is classified as CWE-79, indicating improper neutralization of input during web page generation, which leads to Cross-Site Scripting (XSS). It affects the Titarus product from Verisay Communication and Information Technology Industry and Trade Ltd. Co. versions prior to 2.144.4. The CVSS v3.1 base score is 7.6 with vector AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L, meaning it is remotely exploitable with low attack complexity, requires low privileges, no user interaction, and impacts confidentiality, integrity, and availability to varying degrees.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to unauthorized actions or data disclosure. The CVSS vector indicates limited confidentiality impact but high integrity impact and low availability impact. No known exploits in the wild have been reported, so the actual impact in operational environments is currently unknown.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Verisay's advisories for updates. Until a fix is available, consider applying input validation or output encoding workarounds if feasible to mitigate XSS risks.