CVE-2025-12001 is a vulnerability in BLU-IC2 and BLU-IC4 software versions through 1.19.5 caused by lack of application manifest sanitation, which could lead to stored cross-site scripting (XSS). The flaw allows an attacker to inject malicious scripts that persist and execute in users' browsers, potentially leading to partial confidentiality and integrity impacts. The vulnerability has a CVSS 3.1 base score of 6.1, indicating a medium severity level.