The vulnerability CVE-2025-62036 in uxper Togo (versions before 1.0.4) is due to improper neutralization of input during web page generation, resulting in cross-site scripting (XSS). This allows an attacker to inject malicious scripts that can execute in the context of the victim's browser. The CVSS 3.1 score of 7.1 reflects network attack vector, low attack complexity, required user interaction, and impacts on confidentiality, integrity, and availability. The vulnerability is publicly known but currently lacks a disclosed patch or vendor advisory detailing remediation.

Successful exploitation of this vulnerability could allow attackers to execute arbitrary scripts in users' browsers, potentially leading to theft of sensitive information, session hijacking, or other malicious actions affecting confidentiality, integrity, and availability. The vulnerability requires user interaction and can be exploited remotely over the network. No known active exploits have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with untrusted input and consider implementing web application firewall (WAF) rules to detect and block potential XSS payloads. Monitor official uxper communications for updates and apply patches promptly once available.