This vulnerability (CVE-2025-31021) in dolby_uk Mobile Smart is a reflected cross-site scripting issue caused by improper input neutralization during web page generation. It affects Mobile Smart versions up to v1.3.16. The CVSS 3.1 score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No patch or vendor advisory is currently available, and the product is not a cloud service.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to data disclosure, modification, or disruption of service. The reflected XSS nature requires user interaction to trigger the malicious payload. The vulnerability impacts confidentiality, integrity, and availability as indicated by the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with untrusted input and avoid clicking suspicious links that could trigger reflected XSS. Monitor official dolby_uk communications for updates on patches or mitigations.