CVE-2025-23479

Summary

CVE-2025-23479 is a Cross-site Scripting (XSS) vulnerability affecting the NotFound melascrivi software. The issue stems from improper neutralization of user input during web page generation, allowing an attacker to inject malicious scripts. Successful exploitation of this vulnerability could lead to the execution of arbitrary code in the context of the affected website. This weakness exists in NotFound melascrivi versions ranging from n/a to 1.4, leaving these installations vulnerable. Users are strongly encouraged to apply the necessary patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.