The vulnerability CVE-2025-58860 affects the KaizenCoders Enable Latex plugin (<= 1.2.16). It is a CSRF issue that enables an attacker to inject stored XSS payloads by tricking authenticated users into submitting unauthorized requests. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality, integrity, and availability.

Successful exploitation can lead to stored XSS attacks, allowing an attacker to execute malicious scripts in the context of the victim's browser. This can result in data theft, session hijacking, or other malicious actions impacting confidentiality, integrity, and availability to a limited extent. The vulnerability requires user interaction and affects the security scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should apply standard CSRF mitigations such as disabling or restricting the plugin, limiting user permissions, or using web application firewalls to detect and block CSRF attempts. Monitor official KaizenCoders channels for updates.