CVE-2025-23709
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Jan 22, 2025
CWE ID 79
Summary
CVE-2025-23709 is a Cross-Site Scripting (XSS) vulnerability affecting the Formatted post feature from version n/a through 1.01. An attacker could exploit this issue by injecting malicious scripts into a web page generated by the Formatted post, potentially stealing user data or taking control of their sessions. This vulnerability occurs due to improper neutralization of user input. Users are advised to upgrade to the latest version of Formatted post to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.