CVE-2025-27266

Summary

CVE-2025-27266 is a Cross-site Scripting (XSS) vulnerability affecting Ignacio Perez Hover Image Button. The issue arises from improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts into a webpage. As a result, an adversary can execute DOM-Based XSS attacks on unsuspecting users who visit the affected website. This vulnerability impacts versions of Hover Image Button from n/a through 1.1.2.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.