The vulnerability CVE-2025-47669 affects the CBX Map for Google Map & OpenStreetMap plugin by Sabuj Kundu. It is a DOM-based cross-site scripting (XSS) issue caused by improper neutralization of input during web page generation. This allows an attacker to inject malicious scripts that execute in the victim's browser under certain conditions. The vulnerability affects versions up to and including 1.1.12. The CVSS 3.1 base score is 6.5, indicating medium severity, with attack vector network, low attack complexity, requiring low privileges and user interaction, and impacts on confidentiality, integrity, and availability. No patch or remediation details are currently provided, and no known exploits have been observed.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to limited disclosure or modification of information and some disruption of service. The impact is rated medium due to the requirement for user interaction and low privileges, and the partial impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with untrusted input and consider applying temporary mitigations such as input validation or disabling the affected plugin if feasible. Monitor for updates from Sabuj Kundu or the plugin distribution source and apply patches promptly once available.