The vulnerability CVE-2025-58857 affects the KaizenCoders Table of content plugin, specifically versions up to 1.5.3.1. It is a Stored Cross-site Scripting (XSS) flaw caused by improper neutralization of input during web page generation. This allows attackers to inject malicious scripts that persist in the application and execute when other users view the affected content. The CVSS 3.1 base score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No patch or mitigation details are currently available from the vendor or other sources.

Successful exploitation of this vulnerability can lead to execution of arbitrary scripts in the context of users viewing the compromised content, potentially resulting in partial loss of confidentiality, integrity, and availability of the affected system or user data. Since it is a stored XSS, the malicious payload can persist and affect multiple users. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting use of the affected plugin to mitigate risk. Monitor vendor communications for updates on patches or official mitigations.