CVE-2025-22498

Summary

CVE-2025-22498 is a Cross-Site Scripting (XSS) vulnerability affecting New Normal LLC's LucidLMS from versions n/a through 1.0.5. The vulnerability occurs due to improper neutralization of user input during web page generation. An attacker can exploit this issue by injecting malicious scripts into web pages viewed by other users, potentially stealing sensitive information or gaining unauthorized access. This can lead to security risks, such as information disclosure, account takeover, or phishing attacks. Users are advised to upgrade to the latest version of LucidLMS as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.