The vulnerability CVE-2025-31741 in Filtr8 Easy Magazine involves improper neutralization of input during web page generation, resulting in a DOM-Based Cross-site Scripting (XSS) issue. This affects Easy Magazine versions up to 2.1.13. The vulnerability allows an attacker with low privileges and requiring user interaction to potentially execute scripts that impact confidentiality, integrity, and availability to a limited extent. The CVSS vector indicates network attack vector, low attack complexity, privileges required, user interaction required, and a scope change.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the user's browser, potentially leading to limited confidentiality, integrity, and availability impacts. The medium CVSS score reflects that the attack requires user interaction and some privileges, limiting the overall impact. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted input and consider applying any available workarounds or temporary mitigations recommended by the vendor once they are published.