CVE-2025-22587

Summary

CVE-2025-22587 is a Cross-site Scripting (XSS) vulnerability affecting the SEO Bulk Editor plugin from NCiphers. The flaw, which allows Stored XSS attacks, resides in the application's improper neutralization of user input during web page generation. This issue can be exploited by attackers to inject malicious scripts into the affected website, potentially leading to unauthorized access, data theft or other malicious actions. Organizations using the SEO Bulk Editor plugin versions from n/a through 1.1.0 are advised to upgrade to a patch release as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.