CVE-2025-22362
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 7, 2025
CWE ID 79
Summary
CVE-2025-22362 is a Cross-site Scripting (XSS) vulnerability affecting Powerfusion WPAchievements Free from versions n/a through 1.2.0. Malicious actors can exploit this Improper Neutralization of Input during Web Page Generation issue to inject and execute malicious scripts in a user's web browser. The attacker can manipulate the webpage to steal sensitive information or perform unauthorized actions on behalf of the user. Users are strongly encouraged to update to the latest version of Powerfusion WPAchievements Free to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.