CVE-2025-69006 is a stored cross-site scripting vulnerability in Atte Moisio AM Events (versions <= 1.13.1) caused by improper input neutralization during web page generation. This flaw allows an attacker with high privileges to inject malicious scripts that are stored and later executed when other users view the affected content. The vulnerability has a CVSS 3.1 base score of 5.9, reflecting medium severity with network attack vector, low attack complexity, required privileges, and user interaction. No patch or official remediation information is currently available, and no exploits have been observed in the wild.

Successful exploitation of this vulnerability could allow an attacker with high privileges to inject stored malicious scripts that execute in the context of other users, potentially leading to limited confidentiality, integrity, and availability impacts. The attack requires user interaction and privileges, limiting the scope of exploitation. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user access and apply input validation or sanitization controls if possible to mitigate stored XSS risks.