CVE-2025-23881

Summary

CVE-2025-23881 is aCross-site Scripting (XSS) vulnerability affecting NotFound LJ Custom Menu Links, version 2.5 and below. This issue stems from improper neutralization of user input during web page generation. A successful attack could lead to Reflected XSS, allowing an attacker to inject malicious scripts into a targeted user's web browser, potentially leading to data theft or other malicious activities. With this vulnerability, an attacker's code could execute within the victim's browser context, posing a significant threat to user security. It is essential that affected users upgrade to a secure version of NotFound LJ Custom Menu Links to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.