CVE-2025-23675

Summary

CVE-2025-23675 is a newly identified vulnerability that combines Cross-Site Request Forgery (CSRF) and Stored XSS (Cross-Site Scripting) attacks. Affecting the "Import Users to MailChimp" component, versions n/a through 1.0 are vulnerable to this issue. An attacker can exploit the CSRF vulnerability to force a user into performing unwanted actions, such as account modifications. Simultaneously, the Stored XSS component allows an attacker to inject malicious scripts into a web page viewed by other users, potentially leading to data theft or unauthorized account access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.