CVE-2025-22506
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Jan 13, 2025
CWE ID 79
Summary
CVE-2025-22506 is a Cross-site Scripting (XSS) vulnerability affecting SmartAgenda's Smart Agenda software. The flaw, which is classified as an Improper Neutralization of Input issue, allows attackers to inject malicious scripts into web pages generated by the software. This can lead to unauthorized access to user data or the ability to execute malicious code on affected systems. The vulnerability exists in versions of Smart Agenda from n/a to 4.7, and users are encouraged to update to the latest version to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.