CVE-2025-23658
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2025-23658 is a Cross-Site Scripting (XSS) vulnerability affecting the Advanced Angular Contact Form, with versions from n/a to 1.1.0 being impacted. An attacker can exploit this Improper Neutralization of Input issue during web page generation to inject malicious scripts into a victim's browser, potentially stealing sensitive information or taking control of their account. This vulnerability poses a serious security risk and requires immediate attention from users and administrators alike. It is crucial to update the Advanced Angular Contact Form to a patched version as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.