CVE-2025-23943

Summary

CVE-2025-23943 is a Cross-Site Scripting (XSS) vulnerability affecting the arul PDF.js Shortcode. An attacker can exploit this issue by injecting malicious code into the input during web page generation, resulting in stored XSS. Successful exploitation allows the attacker to execute arbitrary scripts in the context of the affected website, potentially leading to unauthorized access or data theft. The vulnerability impacts PDF.js Shortcode versions from n/a through 1.0. Users are strongly advised to update to the latest, secure version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.