CVE-2025-23982

Summary

CVE-2025-23982 is a security vulnerability affecting the Marian Kanev Cab fare calculator. The issue involves missing authorization, allowing Stored Cross-Site Scripting (XSS) attacks. An adversary can exploit this weakness by injecting malicious scripts into the calculator, potentially stealing user data or gaining unauthorized access. This vulnerability exists in versions from n/a through 1.1, putting affected users at risk. It is crucial for users to update their calculator as soon as a patch is available to protect against these attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.