CVE-2025-22568

Summary

CVE-2025-22568 is a Cross-site Scripting (XSS) vulnerability affecting Paramveer Singh for Arete IT Private Limited's Post and Page Reactions. The flaw, situated in the input neutralization process during webpage generation, enables attackers to inject malicious scripts. This vulnerability, present in versions from n/a through 1.0.5, allows adversaries to carry out Reflected XSS attacks, potentially stealing user data or gaining unauthorized access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.