CVE-2025-22763

Summary

CVE-2025-22763 is a Cross-site Scripting (XSS) vulnerability affecting the NotFound Brizy Pro plugin. The flaw, which allows Reflected XSS attacks, occurs due to improper neutralization of user inputs during web page generation. This issue poses a security risk as malicious scripts can be injected into the web pages viewed by other users, potentially leading to data theft or unauthorized actions. NotFound Brizy Pro versions from n/a through 2.6.1 are reportedly impacted. Users are advised to update to a patched version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.