CVE-2025-24694

Summary

CVE-2025-24694 is a Cross-site Scripting (XSS) vulnerability affecting CreativeMindsSolutions' CM Email Registration Blacklist and Whitelist. The flaw, located in the web page generation process, allows unauthorized attackers to inject malicious scripts into web pages viewed by other users. Successful exploitation could lead to stolen user data, unauthorized account access, or other malicious activities. This issue, identified in versions from n/a through 1.5.5, highlights the importance of keeping software up-to-date to protect against such security threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.