The vulnerability CVE-2025-52727 affects QuanticaLabs CSS3 Vertical Web Pricing Tables plugin (versions up to 1.9) and is classified as a reflected Cross-site Scripting (XSS) flaw. It results from improper neutralization of input during web page generation, enabling attackers to inject and execute arbitrary scripts via crafted input. The CVSS 3.1 base score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. The product is a cloud service, and the vendor manages remediation. A patch is available, though no direct patch links are provided in the data.

Successful exploitation of this vulnerability can lead to execution of arbitrary scripts in the context of the victim's browser, potentially resulting in data disclosure, session hijacking, or other impacts on confidentiality, integrity, and availability. The CVSS score of 7.1 reflects these impacts. No known exploits are reported in the wild currently.

A patch is available for this vulnerability. Since the product is a cloud-hosted service, the vendor typically manages remediation server-side. Users should verify with the vendor advisory that the patch has been applied or that the service is updated to a non-vulnerable version. No additional mitigation steps are indicated by the vendor advisory.