CVE-2025-52161 is a critical cross-site scripting (XSS) vulnerability affecting Scholl Communications AG Weblication CMS Core version 019.004.000.000. The vulnerability allows remote attackers to inject and execute arbitrary scripts without any privileges or user interaction, resulting in complete compromise of confidentiality, integrity, and availability. The CVSS score of 9.8 reflects the high impact and ease of exploitation. No official patch or fix has been disclosed yet, and the affected product is not a cloud service, so remediation depends on vendor patch release or manual mitigation.

Successful exploitation of this XSS vulnerability can lead to full compromise of the affected system's confidentiality, integrity, and availability. Attackers can execute arbitrary scripts in the context of the vulnerable application, potentially stealing sensitive data, performing unauthorized actions, or disrupting service. The vulnerability requires no privileges and no user interaction, increasing its risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is available, users should monitor the vendor's communications for updates. Until a fix is released, consider applying any available workarounds or input validation controls to mitigate XSS risks. Avoid exposing the vulnerable version to untrusted users or networks if possible.