This vulnerability, identified as CVE-2025-47524, affects the karim42 Quran multilanguage Text & Audio product through version 2.3.23. It is a Stored Cross-site Scripting (XSS) issue resulting from improper neutralization of input during web page generation. The CVSS 3.1 base score is 5.9 (medium severity), with an attack vector of network, low attack complexity, requiring high privileges and user interaction. The vulnerability impacts confidentiality, integrity, and availability with low severity. No known exploits are reported in the wild, and no patch or vendor advisory information is currently available.

Successful exploitation of this vulnerability could allow an attacker with high privileges and requiring user interaction to execute stored malicious scripts in the context of the affected application. This could lead to limited confidentiality, integrity, and availability impacts as indicated by the CVSS vector. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit exposure by restricting high privilege access and exercising caution with user interactions in the affected application.