CVE-2025-23653

Summary

CVE-2025-23653 is a Cross-site Scripting (XSS) vulnerability affecting the NotFound Form To Online Booking software, version n/a through 1.0. The issue arises from improper neutralization of user inputs during web page generation, making it possible for attackers to inject malicious scripts, potentially stealing user data or taking control of their sessions. This vulnerability poses a significant risk if exploited and can lead to serious consequences, emphasizing the importance of timely updates and secure coding practices.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.