CVE-2025-26887
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2025-26887 is a Cross-site Scripting (XSS) vulnerability affecting the Eli EZ SQL Reports Shortcode Widget and DB Backup from versions n/a through 5.21.35. Malicious scripts can be injected into web pages generated by these products, potentially stealing user data or taking control of user sessions. The flaw arises due to improper neutralization of user inputs, allowing attackers to inject malicious code into unsuspecting users' browsers. Successful exploitation of this vulnerability could lead to serious security consequences, underscoring the importance of updating to the latest, secure version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.