CVE-2025-22325

Summary

CVE-2025-22325 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Nik Chankov Autocompleter, specifically versions from n/a to 1.3.5.2. An attacker exploiting this issue can perform Stored Cross-Site Scripting (XSS) attacks. The CSRF vulnerability allows the attacker to submit malicious requests on behalf of a user, while the Stored XSS permits the attacker to inject and execute malicious scripts through the affected application. This combination of vulnerabilities poses a significant risk to users, as it can lead to theft of sensitive information or unauthorized actions. It is recommended that users of the Nik Chankov Autocompleter upgrade to a patched version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.