The vulnerability CVE-2025-58242 in Bg Church Memos arises from improper input neutralization during web page generation, leading to a DOM-based Cross-site Scripting (XSS) issue. This allows an attacker with network access and low privileges, requiring user interaction, to execute malicious scripts in a context that can affect confidentiality, integrity, and availability to a limited extent. The affected versions include all versions up to and including 1.1. No vendor advisory or patch information is provided, and the product is not a cloud service.

Successful exploitation of this DOM-based XSS vulnerability could allow an attacker to execute arbitrary scripts in the victim's browser, potentially leading to limited disclosure or modification of information and partial disruption of service. The CVSS vector indicates that the attack requires user interaction and low privileges but can affect confidentiality, integrity, and availability to a limited degree. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted input and consider implementing web application firewall rules or input sanitization as temporary mitigations. Monitor vendor channels for updates regarding patches or official mitigations.