CVE-2025-22781

Summary

CVE-2025-22781 is a Cross-site Scripting (XSS) vulnerability affecting Nativery, a developer platform from version n/a through 0.1.6. The flaw, referred to as DOM-Based XSS, occurs during web page generation in Nativery. An attacker can exploit this vulnerability by injecting malicious scripts into a web page viewed by other users, resulting in unauthorized access to sensitive information or potential data theft. This issue poses a significant risk to users who visit maliciously crafted web pages, and it underscores the importance of regularly updating software to patch known vulnerabilities.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.