CVE-2025-22794
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Feb 4, 2025
Updated: Feb 18, 2025
CWE ID 79
Summary
CVE-2025-22794 is a Cross-site Scripting (XSS) vulnerability affecting the Landoweb Programador World Cup Predictor application. The issue stems from improper neutralization of user input during web page generation. This vulnerability allows an attacker to inject malicious scripts into the application, potentially stealing user data or taking control of their browsing sessions. Affected versions of the World Cup Predictor span from n/a through 1.9.6.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share