CVE-2025-25988

Summary

CVE-2025-25988 is a Cross-Site Scripting (XSS) vulnerability affecting hooskcms version 1.8. An attacker can exploit this flaw by injecting malicious scripts into the custom Link title parameter or the Title parameter, leading to a denial of service. Successful exploitation allows the attacker to execute malicious code in the context of the targeted user, potentially gaining unauthorized access to sensitive information or performing actions on behalf of the user. Users are urged to update their systems to the latest version of hooskcms to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.