CVE-2025-22388
CVSS 3.1 Score 5.7 of 10 (medium)
Details
Published Jan 4, 2025
Updated: Jan 6, 2025
CWE ID 79
Summary
CVE-2025-22388 is a high-severity stored Cross-Site Scripting (XSS) vulnerability affecting Optimizely EPiServer.CMS.Core versions prior to 12.22.0. Malicious actors can exploit this issue by injecting and executing arbitrary JavaScript code in multiple areas, including content editing, link management, and file uploads. Successful exploitation could lead to user data theft, privilege escalation, and unauthorized actions, posing a significant risk to organizations using the affected software.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.