This vulnerability (CVE-2025-49428) in Dourou Cookie Warning is classified as CWE-79 (Improper Neutralization of Input During Web Page Generation), enabling stored cross-site scripting attacks. It affects versions up to 1.3 and allows attackers with low privileges and no user interaction to execute arbitrary code in the context of the affected web application. The CVSS 3.1 score is 7.5, reflecting high impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available, and the product is not a cloud service.

Successful exploitation of this stored XSS vulnerability could lead to full compromise of user sessions, data theft, and potential disruption of service due to the high impact on confidentiality, integrity, and availability. Since the vulnerability allows script execution without user interaction, it poses a significant risk to affected installations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying input validation or output encoding workarounds if feasible, or temporarily disabling the vulnerable component. Monitor vendor channels for updates.