The vulnerability identified as CVE-2025-50047 affects webvitaly Sitekit versions up to 1.9 and is classified as a stored cross-site scripting (XSS) issue. It results from improper input neutralization during the generation of web pages, enabling attackers to inject malicious scripts that persist on the site and execute in the context of other users' browsers. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) reflects network attack vector, low attack complexity, requiring low privileges and user interaction, with scope changed and low impact on confidentiality, integrity, and availability. No patch or remediation information is currently available, and no known exploits have been documented.

Successful exploitation of this stored XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of affected users, potentially leading to limited confidentiality, integrity, and availability impacts. The vulnerability requires user interaction and low privileges, and the scope is changed, meaning the vulnerability affects resources beyond the initially vulnerable component. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with untrusted input and consider implementing temporary mitigations such as input validation and output encoding where possible. Monitor vendor communications for updates on patches or official mitigations.