This vulnerability, identified as CVE-2025-7713, involves improper neutralization of input during web page generation in the Global Interactive Design Media Software Inc. CMS. It allows an attacker to inject malicious scripts via HTTP headers, leading to Cross-site Scripting (CWE-79). The CVSS 3.1 base score is 7.5, reflecting a high severity with network attack vector, low attack complexity, no privileges or user interaction required, and an impact limited to availability. The affected product versions include all up to 21072025. No patch or remediation information is provided, and no known exploits have been reported.

The vulnerability allows an attacker to perform Cross-site Scripting attacks through HTTP headers, which can disrupt the availability of the CMS. According to the CVSS vector, there is no impact on confidentiality or integrity, but availability is affected. No known exploitation in the wild has been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider implementing web application firewall (WAF) rules to detect and block suspicious HTTP headers that may contain malicious scripts.