This vulnerability (CVE-2025-8456) is a reflected Cross-site Scripting (XSS) issue classified under CWE-79 affecting the Kod8 Individual and SME Website by Kod8 Software Technologies Trade Ltd. Co. It results from improper input neutralization during web page generation, enabling attackers to inject malicious scripts that execute in the context of the victim's browser. The vulnerability affects versions through 03022026. The CVSS 3.1 base score is 7.6, reflecting network attack vector, low attack complexity, no privileges required, but requiring user interaction. The vendor has not provided any response or patch information, and no known exploits have been reported. The vulnerability could impact confidentiality, integrity, and availability to varying degrees as indicated by the CVSS vector.

The vulnerability allows reflected XSS attacks that can lead to limited confidentiality and integrity compromise and a high impact on availability according to the CVSS vector. This means an attacker could potentially execute malicious scripts in users' browsers, possibly leading to session hijacking, defacement, or denial of service conditions affecting the website's availability. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch or workaround is available, users and administrators should monitor official channels for updates. Until a fix is released, consider implementing web application firewall (WAF) rules to detect and block reflected XSS payloads as a temporary mitigation.