CVE-2025-22709
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Jan 21, 2025
CWE ID 79
Summary
CVE-2025-22709 is a Cross-Site Scripting (XSS) vulnerability affecting Soft8Soft LLC's Verge3D from version n/a through 4.8.0. Maliciously crafted input during web page generation can be improperly neutralized, allowing attackers to inject and execute malicious scripts in users' browsers. This can result in unauthorized access, data theft, or other malicious activities. Users are advised to update to the latest version of Verge3D to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.