The vulnerability CVE-2025-58596 in properfraction MailOptin is a stored cross-site scripting (XSS) issue caused by improper input neutralization during web page generation. It affects MailOptin versions up to 1.2.75.0. The CVSS 3.1 vector indicates the attack requires network access, low attack complexity, high privileges, user interaction, and results in a partial impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently provided, and no known exploits have been reported.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the context of other users, potentially leading to partial disclosure of information, modification of data, or disruption of availability. However, exploitation requires user interaction and high privileges, limiting the ease of attack. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit high privilege user access and exercise caution with user-generated content. Monitor vendor channels for updates regarding patches or mitigations.