CVE-2025-25082

Summary

CVE-2025-25082 is a Cross-site Scripting (XSS) vulnerability affecting Max Chirkov FlexIDX Home Search from an unknown version up to 2.1.2. The flaw, named "Improper Neutralization of Input," enables an attacker to inject malicious scripts into web pages generated by the application. This stored XSS vulnerability poses a significant risk as the scripts can be executed whenever the affected pages are viewed, potentially leading to unauthorized access, data theft, or other malicious activities. Users are strongly advised to update their FlexIDX Home Search installations to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.