CVE-2025-22570
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Jan 13, 2025
CWE ID 79
Summary
CVE-2025-22570 is a Cross-site Scripting (XSS) vulnerability affecting Miloš Đekić Inline Tweets from an unknown version up to 2.0. The flaw involves improper neutralization of user input during web page generation, resulting in Stored XSS (SXSS). Attackers can exploit this issue by injecting malicious scripts into the affected application, which could lead to unauthorized data access or theft of user credentials. Users are strongly advised to upgrade to the latest version of Inline Tweets to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.