CVE-2025-23485

Summary

CVE-2025-23485 is a Cross-Site Scripting (XSS) vulnerability affecting the RS Survey software from RichestSoft. The flaw, which allows Reflected XSS attacks, is caused by improper neutralization of user input during web page generation. This issue could potentially be exploited by attackers to inject malicious scripts into a victim's web browser, leading to unauthorized access to sensitive information or the ability to conduct further attacks. Users running affected versions of RS Survey are advised to apply the necessary patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.