CVE-2025-24641

Summary

CVE-2025-24641 is a Cross-Site Scripting (XSS) vulnerability affecting the Better WishList API. The flaw, which lies in the improper neutralization of user input during web page generation, enables attackers to inject malicious scripts into the application. Successful exploitation could lead to the theft of user data or the hijacking of user sessions. This issue affects Better WishList API versions from n/a through 1.1.3. It is strongly advised that users upgrade to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.