The vulnerability CVE-2025-69169 in Noor Alam Easy Media Download plugin arises from improper neutralization of script-related HTML tags in web pages, leading to a reflected XSS condition. This allows an attacker with low privileges to inject script code that can be reflected back in the web response, potentially impacting the integrity and availability of the affected system. The vulnerability affects all versions up to 1.1.11. The CVSS v3.1 base score is 5.4, indicating medium severity, with attack vector network, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and limited availability impact.

The impact of this vulnerability is limited to integrity and availability, as indicated by the CVSS vector. An attacker could inject malicious scripts that may alter the behavior of the web application or disrupt service availability. There is no confidentiality impact reported. No known exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix links are provided, users should monitor for updates from Noor Alam. In the meantime, consider applying web application firewall (WAF) rules to detect and block reflected XSS attempts if feasible.