The vulnerability CVE-2025-27329 affects the inlinkz EZ InLinkz linkup product (versions up to 0.18) and is characterized by improper neutralization of input during web page generation, resulting in a DOM-based cross-site scripting (XSS) issue. The CVSS 3.1 base score is 6.5, indicating a medium severity level. The attack vector is network-based with low attack complexity, requiring privileges and user interaction. Successful exploitation can lead to partial impacts on confidentiality, integrity, and availability of the affected system.

Exploitation of this vulnerability can lead to execution of malicious scripts in the context of the affected web application, potentially allowing an attacker to steal sensitive information, manipulate data, or disrupt availability. The CVSS vector indicates that the attacker needs some privileges and user interaction, and the impact is limited to partial confidentiality, integrity, and availability loss. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should apply standard precautions such as limiting privileges and avoiding untrusted input where possible. Monitor vendor communications for updates on patches or official mitigations.