CVE-2025-22524

Summary

CVE-2025-22524 is a Cross-Site Scripting (XSS) vulnerability affecting the instaform.ir فرم ساز فرم افزار software from version n/a through 2.0. This issue arises due to improper neutralization of input during web page generation, allowing attackers to inject malicious scripts into web pages viewed by other users. These scripts can steal user data, perform unauthorized actions, or redirect users to malicious websites, posing a significant security risk. Users are advised to update to the latest version of the software or consider alternative solutions to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.