CVE-2025-25115

Summary

CVE-2025-25115 is a Cross-site Scripting (XSS) vulnerability affecting the Like dislike plus counter version 1.0 and below. The issue arises from improper neutralization of user input during web page generation, allowing an attacker to inject malicious scripts into the counter's interface. The stored XSS vulnerability can be exploited to execute arbitrary code on the victim's browser when they visit a specially crafted webpage. This could potentially lead to data theft, session hijacking, or other malicious activities. Users are advised to update their counter software to a secure version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.