CVE-2025-23941
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 16, 2025
CWE ID 79
Summary
CVE-2025-23941 is a Cross-site Scripting (XSS) vulnerability affecting MeinTurnierplan.de's Widget Viewer. An attacker can inject malicious scripts into the web pages generated by this component, exploiting improper input neutralization. Stored XSS attacks, as in this case, allow attackers to execute their code persistently, potentially leading to session hijacking, data theft, or other forms of unauthorized access. This vulnerability impacts all versions of MeinTurnierplan.de Widget Viewer from n/a through 1.1.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.