CVE-2025-23703
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2025-23703 is a Cross-Site Request Forgery (CSRF) vulnerability affecting CS : ABS-Hosting.nl / Walchum.net Free MailClient FMC. Malicious actors can exploit this issue, which allows Stored XSS (Cross-Site Scripting), to inject malicious scripts into users' web browsers. Successful exploitation could result in unauthorized actions being taken on behalf of the victim, such as account takeover or data theft. The vulnerability affects the Free MailClient FMC software from an unknown version up to 1.0. Users are advised to update to a patched version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.