CVE-2025-23526

Summary

CVE-2025-23526 is a Cross-Site Scripting (XSS) vulnerability affecting the NotFound Swift Calendar Online Appointment Scheduling application. The issue arises from improper neutralization of user inputs during web page generation. An attacker can exploit this vulnerability to inject and execute malicious scripts in users' browsers, potentially stealing sensitive information or taking control of the affected account. Swift Calendar Online Appointment Scheduling versions from n/a through 1.3.3 are reportedly impacted by this issue. Users are advised to upgrade to the latest, secure version to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.