CVE-2025-22566
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Mar 28, 2025
CWE ID 79
Summary
CVE-2025-22566 is a Cross-Site Scripting (XSS) vulnerability affecting the NotFound ULTIMATE VIDEO GALLERY. The flaw, located in the web page generation process, enables attackers to inject malicious scripts into web pages viewed by other users. This issue puts user data at risk, particularly when users visit specifically crafted URLs. ULTIMATE VIDEO GALLERY versions 1.4 and earlier are reportedly vulnerable, making it essential for users to update their software to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.