The vulnerability CVE-2025-25136 in shujahat21 Optimate Ads (versions <= 1.0.3) is a stored cross-site scripting issue caused by improper input neutralization during web page generation. This allows attackers with at least low privileges and requiring user interaction to inject malicious scripts that can compromise confidentiality, integrity, and availability of the affected system. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, and partial user interaction required. No patch or official fix information is provided, and no known exploits have been reported.

Successful exploitation of this stored XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to partial loss of confidentiality, integrity, and availability. The attack requires some user interaction and low privileges, but can affect multiple users if malicious scripts are stored and served to others.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting privileges and input sources, and apply web application firewall rules to detect and block XSS payloads where possible. Monitor vendor channels for updates and patches.