CVE-2025-60141 describes a stored cross-site scripting vulnerability in thetechtribe The Tribal product versions up to 1.3.3. The issue is caused by improper neutralization of input during web page generation, which allows an attacker with high privileges to inject malicious scripts that are stored and later executed in the context of other users' browsers. The vulnerability has a CVSS 3.1 score of 5.9, reflecting medium severity with impacts on confidentiality, integrity, and availability. Exploitation requires user interaction and elevated privileges. No patch or vendor advisory is currently provided, and no known active exploits exist.

Successful exploitation of this stored XSS vulnerability can lead to limited compromise of confidentiality, integrity, and availability of the affected system or user data. Because it requires high privileges and user interaction, the risk is moderated but still significant for affected environments. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict high-privilege user access and apply input validation or output encoding controls where possible to mitigate stored XSS risks. Monitor for vendor updates and apply patches promptly once available.