CVE-2025-0747

Summary

CVE-2025-0747 is a newly discovered Stored Cross-Site Scripting (XSS) vulnerability affecting EmbedAI. This issue grants authenticated attackers the ability to inject malicious JavaScript code into messages. Upon opening the chat, unsuspecting users will execute the script, potentially leading to data theft or unauthorized system access. EmbedAI urges immediate patching to mitigate this risk. Attackers can exploit this flaw to steal user data or gain unauthorized access to the system. This vulnerability allows injecting malicious JavaScript code into messages, which is executed when users open the chat, posing a significant threat to data security. EmbedAI advises swift implementation of security patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.