CVE-2025-25128

Summary

CVE-2025-25128 is a Cross-Site Request Forgery (CSRF) vulnerability discovered in the orlandolac Facilita Form Tracker. This issue permits an attacker to execute Stored XSS (Cross-Site Scripting) attacks on unsuspecting users. The vulnerability affects versions of Facilita Form Tracker from undisclosed to 1.0. An attacker can exploit this weakness by tricking a user into clicking a malicious link, resulting in the injection of malicious scripts into web pages the user visits, potentially leading to data theft or system compromise.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.