CVE-2025-23537

Summary

CVE-2025-23537 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the "add custom google tag manager" component, versions n/a through 1.0.3. An attacker could exploit this issue to execute Stored Cross-Site Scripting (XSS) attacks on unsuspecting users. The CSRF flaw enables an attacker to induce the targeted user's browser to send unintended commands to the web application, potentially leading to the injection of malicious scripts. This vulnerability poses a significant risk, as it could be used to steal sensitive data or take control of a user's account without their consent.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.