CVE-2025-23656

Summary

CVE-2025-23656 is a newly identified vulnerability affecting the Donate visa software. This Missing Authorization issue permits Stored Cross-Site Scripting (XSS) attacks. An attacker can exploit this vulnerability by injecting malicious scripts into the application, posing a risk of data theft or unauthorized access. The flaw is found in Donate visa versions from n/a to 1.0.0, making it crucial for users to apply the necessary security patches to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.