CVE-2025-23958

Summary

CVE-2025-23958 is a Missing Authorization vulnerability affecting the FADI MED Editor Wysiwyg Background Color. This issue arises due to incorrectly configured access control security levels, enabling attackers to exploit the vulnerability. The editor's background color component, from version n/a through 1.0, is susceptible to this vulnerability. Successful exploitation may lead to unauthorized actions and potential data breaches. Organizations using this editor should ensure their access control settings are properly configured to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.