The vulnerability CVE-2025-58830 affects snagysandor's Parallax Scrolling Enllax.js library versions up to 0.0.6. It is a stored cross-site scripting (XSS) issue caused by improper neutralization of input during web page generation. This allows malicious input to be stored and later executed in the context of a user's browser, potentially leading to partial compromise of confidentiality, integrity, and availability. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, required privileges, user interaction, and scope change.

Successful exploitation of this stored XSS vulnerability can lead to partial loss of confidentiality, integrity, and availability of the affected web application or user data. Attackers may execute arbitrary scripts in the victim's browser, potentially stealing sensitive information or performing unauthorized actions within the context of the affected site. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider implementing input validation and output encoding on the application side to mitigate stored XSS risks related to this library.