CVE-2025-24686

Summary

CVE-2025-24686 is a Cross-site Scripting (XSS) vulnerability affecting Metagauss User Registration Forms' RegistrationMagic, from versions n/a through 6.0.3.3. This issue arises due to improper neutralization of user input during web page generation. An attacker can exploit this vulnerability by injecting malicious scripts into forms, potentially stealing user data or taking control of their browsing sessions. The consequence of this security flaw is a significant risk to users, making it crucial for Metagauss to address and patch this vulnerability promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.