CVE-2025-6396 is an XSS vulnerability classified under CWE-79 in Webbeyaz Website Design Website Software. It results from improper input neutralization during web page generation, allowing attackers to inject malicious scripts. The vulnerability affects the software versions up to 2025.07.14. The CVSS v3.1 base score is 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N), indicating network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and limited confidentiality and integrity impacts without availability impact. No patch or vendor advisory is currently available, and no exploits are known in the wild.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected website, potentially leading to limited disclosure of information and modification of data within the user's session. There is no indication of availability impact. The vulnerability requires user interaction and affects confidentiality and integrity to a limited extent.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently available, users should monitor vendor communications for updates. Until a fix is provided, applying input validation or output encoding at the application level may help mitigate the risk. No vendor advisory indicates that the issue is already mitigated or requires no action.