CVE-2025-26582
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2025-26582 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the TinyMCE Advanced qTranslate fix editor from versions n/a through 1.0.0. An attacker can exploit this issue to perform Stored Cross-Site Scripting (XSS) attacks. The CSRF vulnerability allows an attacker to make unauthorized requests on behalf of a user, potentially leading to the execution of malicious scripts in the user's browser. This can result in data theft, unauthorized account actions, or other security breaches. It is important for users to update their TinyMCE Advanced qTranslate fix editor to a patched version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.