CVE-2025-31573

Summary

CVE-2025-31573 is a Cross-site Scripting (XSS) vulnerability affecting the PeproDev CF7 Database from version n/a through 2.0.0. Hackers can exploit this improper neutralization of input issue during web page generation to inject malicious scripts and gain unauthorized access to user data or perform actions on their behalf. This poses a significant security risk, as successful attacks can lead to data theft, account takeover, or further exploitation. Users are advised to update their PeproDev CF7 Database to a secure version as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.