CVE-2025-22554

Summary

CVE-2025-22554 is a Cross-site Scripting (XSS) vulnerability affecting the Video Embed Optimizer software. The flaw, which allows Stored XSS attacks, occurs due to improper neutralization of user input during web page generation. This issue can be exploited by attackers to inject malicious scripts into a affected website, potentially stealing user data or taking control of their accounts. The vulnerability affects Video Embed Optimizer versions from n/a through 1.0.0. System administrators are strongly encouraged to update to the latest version or implement other mitigations to protect against this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.