CVE-2025-22774

Summary

CVE-2025-22774 is a Cross-Site Scripting (XSS) vulnerability affecting CRUDLab's Scroll to Top feature. The flaw, which allows reflected XSS attacks, resides in the CRUDLab Scroll to Top component, impacting versions from n/a to 1.0.1. Attackers can exploit this vulnerability by injecting malicious scripts into web pages viewed by other users. Successful attacks may result in unintended execution of malicious code, potentially leading to data theft or other serious consequences. Users are advised to update to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.