The vulnerability CVE-2025-60170 affects the HTACCESS IP Blocker plugin by Taraprasad Swain, allowing an attacker to exploit a CSRF weakness to inject stored XSS payloads. This can lead to cross-site scripting attacks that impact the confidentiality, integrity, and availability of the affected system. The issue affects all versions up to 1.0. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges but requires user interaction, and the scope is changed, affecting multiple security properties.

Successful exploitation of this vulnerability could allow an attacker to execute stored XSS attacks via CSRF, potentially leading to unauthorized actions performed in the context of an authenticated user. This impacts confidentiality, integrity, and availability to a limited extent as indicated by the CVSS metrics. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix is documented, users should monitor the vendor's communications for updates. In the meantime, limiting exposure by restricting access to the plugin's administrative interfaces and employing general CSRF protections may reduce risk.