CVE-2025-27271
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Mar 3, 2025
CWE ID 79
Summary
CVE-2025-27271 is a Cross-Site Scripting (XSS) vulnerability affecting the DB Tables Import/Export feature of NotFound. An attacker can exploit this improper neutralization of input issue during web page generation to inject malicious scripts and steal user data. This vulnerability exists in versions 1.0.1 and below of DB Tables Import/Export. Users are advised to update to the latest version or implement adequate XSS protections to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.