CVE-2025-22513

Summary

CVE-2025-22513 is a Cross-Site Scripting (XSS) vulnerability affecting NotFound Simple Locator, a plugin used for managing custom 404 error pages. The flaw, located in the web page generation process, permits an attacker to inject malicious scripts into a targeted user's web browser, potentially stealing sensitive information or gaining unauthorized access. The vulnerability affects NotFound Simple Locator versions 2.0.1 through 2.0.4. Users are urged to upgrade to a secure version as soon as possible to mitigate the risk of a successful attack.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.