CVE-2025-24536
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2025-24536 is a Cross-Site Scripting (XSS) vulnerability affecting ThriveDesk, a support software solution. The flaw, named Reflected XSS, resides in ThriveDesk's web page generation process, allowing an attacker to inject malicious scripts into a web page viewed by other users. This issue poses a significant risk, as successful exploitation could lead to theft of user data, unauthorized account access, or even full system takeover. ThriveDesk versions from n/a through 2.0.6 have been identified as being vulnerable. Users are advised to upgrade to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.