The vulnerability CVE-2025-58805 affects OTWthemes Widgetize Pages Light plugin (versions up to 3.0) and is characterized as a stored cross-site scripting (XSS) issue caused by improper input neutralization during web page generation. The CVSS 3.1 score is 5.9 (medium), with attack vector network, low attack complexity, requiring high privileges and user interaction, and impacts on confidentiality, integrity, and availability. No patch or vendor advisory is currently provided, and no known exploits have been reported.

Successful exploitation could allow an attacker with high privileges and user interaction to inject persistent malicious scripts into web pages generated by the plugin. This may lead to partial compromise of confidentiality, integrity, and availability of the affected system or data. However, exploitation requires user interaction and elevated privileges, limiting the attack scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user access to the affected plugin and monitor for suspicious activity related to web page content injection.