CVE-2025-23470

Summary

CVE-2025-23470 is a newly disclosed vulnerability that affects the X Villamuera Visit Site Link enhanced application. This issue combines two serious threats: Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS). The CSRF vulnerability enables attackers to submit malicious requests on behalf of users, while the Stored XSS vulnerability allows attackers to inject malicious scripts into web pages that are later viewed by other users. Together, these vulnerabilities pose a significant risk to the security of the Visit Site Link enhanced application, potentially leading to unauthorized actions and data theft. Users are strongly encouraged to update to the latest version of the application to mitigate these risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.