CVE-2025-57979 is a stored cross-site scripting vulnerability in the AuthorSure product by Russell Jamieson affecting versions up to 2.3. The issue arises from improper neutralization of input during web page generation, allowing malicious scripts to be stored and executed in users' browsers. The CVSS 3.1 base score is 5.9 (medium), with attack vector network, low attack complexity, requiring high privileges and user interaction, and impacts on confidentiality, integrity, and availability at a low level. No known exploits in the wild or vendor patches are currently documented.

Successful exploitation can result in execution of malicious scripts in the context of the affected application, potentially leading to partial compromise of confidentiality, integrity, and availability of the system or data. The attack requires a privileged user to perform an action and another user to interact with the malicious content, limiting the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user actions that involve inputting data rendered in web pages and apply input validation or output encoding as a temporary mitigation if possible.