This vulnerability in WatchGuard Fireware OS arises from improper input neutralization during web page generation, leading to stored XSS in the Autotask Technology Integration module. It provides an additional unmitigated attack vector related to a previously identified issue (CVE-2025-13938). The affected versions explicitly include 12.4, 12.5, and 2025.1. No official remediation or patch is currently documented, and no known exploits are reported in the wild.

Successful exploitation could allow an attacker with high privileges and user interaction to execute stored cross-site scripting attacks, potentially leading to script execution in the context of the affected application. However, the vulnerability requires user interaction and high privileges, limiting the impact scope. There is no indication of confidentiality, integrity, or availability impact beyond the XSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround is documented at this time. Users should monitor WatchGuard advisories for updates and apply any future patches promptly. Given the requirement for high privileges and user interaction, limiting access to the affected modules and following best practices for user privilege management may reduce risk.