CVE-2025-23645

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Feb 4, 2025
CWE ID 79

Summary

CVE-2025-23645 is a Cross-site Scripting (XSS) vulnerability affecting Optimize Worldwide's Find Content IDs. This issue, which impacts versions from n/a through 1.0, allows attackers to inject malicious scripts into web pages viewed by other users. The vulnerability stems from improper neutralization of user inputs during the web page generation process. Successful exploitation could lead to unauthorized data access or theft of user credentials. Users are advised to update to the latest version of Find Content IDs to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share