CVE-2025-22718

Summary

CVE-2025-22718 is a Cross-site Scripting (XSS) vulnerability affecting the Roninwp FAT Event Lite software. This issue arises due to improper neutralization of user inputs during web page generation. An attacker can exploit this flaw to inject malicious scripts into web pages viewed by other users, potentially stealing sensitive information or taking control of their sessions. The vulnerability affects all versions of FAT Event Lite from the unspecified n/a through 1.1. To mitigate the risk, it is recommended that users upgrade to the latest patched version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.