CVE-2025-25071

Summary

CVE-2025-25071 is a newly disclosed vulnerability that impacts the Vignette Ads plugin. This issue combines both Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS) vulnerabilities. An attacker can exploit the CSRF weakness to manipulate user actions, while the Stored XSS component enables the injection of malicious scripts into web pages viewed by other users. The affected versions of Vignette Ads range from n/a to 0.2. It is crucial for users to apply the necessary patches or updates as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.