The vulnerability CVE-2025-60163 affects the Robin W bbp topic count plugin (version ≤ 3.2). It is a DOM-based cross-site scripting (XSS) flaw caused by improper input neutralization during web page generation. The CVSS 3.1 base score is 6.5 (medium), with an attack vector of network, low attack complexity, requiring low privileges and user interaction, and impacts on confidentiality, integrity, and availability at a low level. There are no known exploits in the wild and no patch links or vendor advisories provided.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to partial disclosure of information, modification of data, or disruption of service. The impact is rated medium due to the requirement of user interaction and low privilege level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying any available workarounds or input sanitization measures if feasible. Monitor vendor channels for updates regarding patches or official mitigations.