The vulnerability CVE-2025-53336 affects abditsori My Resume Builder (<= 1.0.3) and is classified as a stored cross-site scripting (XSS) flaw. It results from improper input sanitization during web page generation, enabling attackers to inject malicious scripts that persist in the application and execute in the context of other users. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, user interaction needed, and impacts confidentiality, integrity, and availability at a low level. No patch or official fix information is currently available.

Successful exploitation of this stored XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of other users, potentially leading to information disclosure, session hijacking, or other impacts on confidentiality, integrity, and availability. The CVSS score of 6.5 reflects a medium impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with input handling and consider implementing web application firewall (WAF) rules to detect and block XSS payloads. Avoid running vulnerable versions in production environments where possible.