CVE-2025-23646

Summary

CVE-2025-23646 is a Cross-site Scripting (XSS) vulnerability affecting the Matt Brooks Library Instruction Recorder. The flaw, which allows Reflected XSS, occurs during the web page generation process. Attackers can exploit this vulnerability to inject malicious scripts into web pages viewed by other users. The issue affects Library Instruction Recorder versions from n/a through 1.1.4. Users are advised to update their software as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.