The vulnerability CVE-2025-58633 affects Deetronix Booking Ultra Pro through version 1.1.21 and involves improper input neutralization leading to stored cross-site scripting (XSS). This allows attackers to inject malicious scripts that persist on the affected web application and execute in the context of users' browsers. The CVSS vector indicates the attack can be performed remotely over the network with low privileges and requires user interaction. The vulnerability impacts confidentiality, integrity, and availability of the affected system. No vendor advisory or patch information is provided, and no known active exploitation has been reported.

Successful exploitation of this stored XSS vulnerability can lead to unauthorized script execution in users' browsers, potentially resulting in data theft, session hijacking, or other malicious actions affecting confidentiality, integrity, and availability. The medium CVSS score reflects these impacts but also the requirement for user interaction and low privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider applying input validation and output encoding controls where possible to mitigate stored XSS risks. Monitor vendor channels for updates and patches addressing this vulnerability.