CVE-2025-23501

Summary

CVE-2025-23501 is a Cross-Site Request Forgery (CSRF) vulnerability discovered in SpruceJoy's Cookie Consent & Autoblock for GDPR/CCPA. This issue enables attackers to inject and execute malicious code, known as Stored XSS, through specially crafted requests. The vulnerability affects versions of Cookie Consent & Autoblock for GDPR/CCPA from undisclosed versions up to and including 1.0.1. Successful exploitation could lead to unintended actions being taken on behalf of the affected user, potentially compromising their data. Users are strongly encouraged to update to the latest version of the software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.