CVE-2025-23753
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Mar 3, 2025
CWE ID 79
Summary
CVE-2025-23753 is a Cross-site Scripting (XSS) vulnerability affecting the NotFound DN Sitemap Control from version n/a through 1.0.6. An attacker can exploit this Improper Neutralization of Input vulnerability during web page generation to inject malicious scripts into a targeted user's browser. Successful exploitation may result in unauthorized access to sensitive information or the ability to execute arbitrary code in the user's context. Users are strongly advised to update their NotFound DN Sitemap Control software to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.