CVE-2025-22497
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 27, 2025
CWE ID 79
Summary
CVE-2025-22497 is a Cross-site Scripting (XSS) vulnerability affecting the Simple Google Calendar Outlook Events Block Widget, with versions from n/a to 2.5.0 being impacted. An attacker can exploit this issue by injecting malicious scripts into web pages generated by the widget, gaining unauthorized access to user sessions or stealing sensitive information. Users are advised to upgrade to the latest version of the widget to mitigate this risk and prevent potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.