The vulnerability CVE-2025-62933 in Prakash Awesome Testimonials (<= 2.2.1) is a CSRF flaw that enables an attacker to inject stored XSS payloads by tricking authenticated users into submitting crafted requests. This can lead to persistent script execution in the context of the affected application. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts confidentiality, integrity, and availability to a limited extent.

Successful exploitation can lead to stored XSS, allowing attackers to execute arbitrary scripts in the context of users interacting with the vulnerable plugin. This can compromise user data confidentiality, integrity, and availability. The vulnerability is rated high severity with a CVSS score of 7.1, reflecting the potential for significant impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting access to the vulnerable plugin to mitigate risk. Monitor vendor channels for updates and apply patches promptly once available.