CVE-2025-25075

Summary

CVE-2025-25075 is a serious vulnerability affecting the "Show notice or message on admin area" version 2.0 and below. This issue combines two risks in one: a Cross-Site Request Forgery (CSRF) vulnerability and a Stored XSS (Cross-Site Scripting) flaw. An attacker could exploit the CSRF weakness to force a user into making unintended actions on the affected site. Meanwhile, the Stored XSS vulnerability allows an attacker to inject malicious scripts into the admin area, potentially stealing sensitive information or taking control of user accounts. Both threats put the security and integrity of the targeted system at risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.