CVE-2025-50017 is a stored cross-site scripting vulnerability in the Matt WP Voting Contest WordPress plugin (versions up to 5.8). It results from improper input neutralization during web page generation, enabling attackers with high privileges to inject malicious scripts that execute in the context of other users. The vulnerability has a CVSS 3.1 score of 5.9, reflecting medium severity with network attack vector, low attack complexity, required privileges, and user interaction. No patch or vendor advisory is currently provided, and no exploits are known in the wild.

Successful exploitation can lead to limited confidentiality, integrity, and availability impacts due to stored XSS. Attackers with high privileges can inject scripts that execute in other users' browsers, potentially leading to session hijacking, defacement, or other malicious actions. However, exploitation requires user interaction and elevated privileges, reducing the overall risk. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user access to trusted individuals only and consider disabling or limiting use of the affected plugin. Monitor for vendor updates and apply patches promptly once released.