The vulnerability CVE-2025-58875 in the WP Github Gist plugin by Sudar Muthu is a stored cross-site scripting issue caused by improper input neutralization during web page generation. This allows attackers with some privileges to inject malicious scripts that execute when other users view the affected content. The vulnerability affects versions up to 0.5. The CVSS score of 6.5 reflects a medium severity with impacts on confidentiality, integrity, and availability. There is no vendor advisory or patch information provided, and no known active exploitation has been reported.

Successful exploitation could allow an attacker with privileges to inject malicious scripts that execute in the context of other users, potentially leading to partial compromise of confidentiality, integrity, and availability of the affected system or user data. The medium CVSS score reflects these moderate impacts. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for updates from the plugin vendor. Until a fix is available, consider restricting privileges to trusted users and limiting exposure to untrusted input in the plugin. No vendor advisory states that no action is required or that the issue is mitigated.