CVE-2025-23928

Summary

CVE-2025-23928 is a Cross-site Scripting (XSS) vulnerability affecting the Google Org Chart from version n/a through 1.0.1. An attacker can exploit this Improper Neutralization of Input during Web Page Generation issue to inject malicious scripts into the application. The stored XSS vulnerability allows the attacker to execute the scripts each time the affected page is loaded, potentially stealing user data or taking control of their accounts. This poses a significant risk to users interacting with the Google Org Chart and emphasizes the importance of updating to the latest version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.