The vulnerability CVE-2025-58233 in Guaven Labs SQL Chart Builder involves improper neutralization of input during web page generation, resulting in a DOM-based cross-site scripting (XSS) issue. This affects versions up to and including 2.3.7.2. The CVSS 3.1 score is 6.5, indicating medium severity, with attack vector network, low attack complexity, requiring privileges and user interaction, and impacts on confidentiality, integrity, and availability at a low level. No patch or vendor advisory is provided in the data, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to partial disclosure of information, modification of data, or disruption of service. The impact is rated as medium severity with limited confidentiality, integrity, and availability impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should apply standard precautions such as limiting privileges and user interaction where possible. Monitor vendor channels for updates regarding patches or official mitigations.