CVE-2025-24631

Summary

CVE-2025-24631 is an input validation vulnerability affecting PhiloPress BP Email Assign Templates. The issue, classified as Cross-site Scripting (XSS), enables attackers to inject malicious scripts into web pages generated by the affected software. This vulnerability can be exploited through reflected XSS attacks, potentially leading to unauthorized access or data theft. The affected version range is from n/a to 1.5. Users are urged to update their software as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.