CVE-2025-23941

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jan 16, 2025
CWE ID 79

Summary

CVE-2025-23941 is a Cross-site Scripting (XSS) vulnerability affecting MeinTurnierplan.de's Widget Viewer. An attacker can inject malicious scripts into the web pages generated by this component, exploiting improper input neutralization. Stored XSS attacks, as in this case, allow attackers to execute their code persistently, potentially leading to session hijacking, data theft, or other forms of unauthorized access. This vulnerability impacts all versions of MeinTurnierplan.de Widget Viewer from n/a through 1.1.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share