CVE-2025-23542

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Mar 26, 2025
Updated: Mar 27, 2025
CWE ID 79

Summary

CVE-2025-23542 is a Cross-Site Scripting (XSS) vulnerability affecting the Robert D Payne RDP Linkedin Login. An attacker can exploit this Improper Neutralization of Input issue during web page generation to inject malicious scripts into a victim's browser. The vulnerability is reflected, meaning an attacker does not require user interaction or access to the victim's account to execute the attack. This issue affects versions of the RDP Linkedin Login from n/a to 1.7.0. Users are advised to update their software as soon as possible to mitigate the risk of potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share