CVE-2025-27306

Summary

CVE-2025-27306 is a Cross-Site Scripting (XSS) vulnerability affecting Pathomation from versions n/a through 2.5.1. Maliciously crafted input data can be stored in web pages generated by Pathomation, allowing attackers to inject and execute malicious scripts in users' browsers when they view these pages. This issue poses a serious security risk as it allows attackers to steal sensitive information or take control of users' sessions. Users are advised to upgrade to the latest version of Pathomation as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.