CVE-2025-23577

Summary

CVE-2025-23577 is a newly disclosed vulnerability affecting Sourov Amin Word Freshener. This issue involves a Cross-Site Request Forgery (CSRF) weakness that permits Stored Cross-Site Scripting (XSS), enabling attackers to inject malicious scripts into unsuspecting users' browsers. The vulnerability affects Word Freshener versions from n/a through 1.3, posing a significant risk for those using the software. Attackers can exploit this flaw to launch various attacks, including data theft, privilege escalation, and further CSRF attacks. Users are strongly advised to update their Word Freshener installations as soon as possible to mitigate these risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.