CVE-2025-23919
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Jan 16, 2025
CWE ID 80
Summary
CVE-2025-23919 is a vulnerability affecting Ella van Durpe Slides & Presentations, where improper neutralization of script-related HTML tags allows Code Injection through a Basic XSS (Cross-Site Scripting) attack. This issue exists in versions from n/a to 0.0.39 of the software. Attackers can inject malicious code into web pages viewed by other users, potentially stealing sensitive information or taking control of their accounts. It is essential that users upgrade to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.