CVE-2025-23737

Summary

CVE-2025-23737 is a Cross-site Scripting (XSS) vulnerability affecting NotFound Network-Favorites from versions n/a through 1.1. Attackers can exploit this issue by injecting malicious scripts into web pages generated by the application, potentially gaining unauthorized access to user data or taking control of user sessions. This vulnerability occurs due to improper neutralization of user input, putting users at risk of phishing attacks and other malicious activities. It is essential for users to update their software to the latest version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.