CVE-2025-22727

Summary

CVE-2025-22727 is a Cross-site Scripting (XSS) vulnerability affecting MailChimp Subscribe Forms, specifically versions from n/a to 4.1. This issue arises due to improper neutralization of user inputs during web page generation. An attacker can exploit this vulnerability to inject malicious scripts into a web page viewed by other users, potentially leading to stolen data or unauthorized actions. The stored XSS nature of this flaw enables attackers to successfuly carry out their malicious activities even after the initial vulnerable page has been accessed and closed by the user.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.