CVE-2025-28900

Summary

CVE-2025-28900 is a Cross-Site Request Forgery (CSRF) vulnerability affecting TabGarb Pro, a webgarb component. The flaw permits Stored XSS (Cross-Site Scripting) attacks against users of TabGarb Pro versions from n/a to 2.6. An attacker could exploit this issue by crafting a malicious web link that, when clicked, allows them to inject malicious scripts into the targeted user's web session, potentially stealing sensitive data or taking control of their account. Users are advised to update to the latest version of TabGarb Pro to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.