CVE-2025-23652

Summary

CVE-2025-23652 represents a Cross-site Scripting (XSS) vulnerability in the "Add custom content after post" feature of NotFound, a software from an unknown version through 1.0. This issue arises due to improper neutralization of user input during web page generation. An attacker can exploit this flaw to inject malicious scripts into web pages viewed by other users, potentially leading to unauthorized data access or theft of user credentials. This vulnerability poses a significant risk to system integrity and user privacy.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.