The vulnerability CVE-2025-67622 affects the Evergreen Post Tweeter plugin by titopandub, allowing CSRF attacks that can result in stored XSS. This affects all versions up to 1.8.9. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is needed. The vulnerability impacts confidentiality, integrity, and availability to a limited extent. No patch or vendor advisory is currently available, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow an attacker to execute unauthorized actions via CSRF, leading to stored XSS that may compromise user data confidentiality, integrity, and availability. The CVSS score of 7.1 reflects a high severity impact, but no known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as anti-CSRF tokens and validating user requests. Monitoring for suspicious activity related to stored XSS may also help mitigate risk.