CVE-2025-31778

Summary

CVE-2025-31778 is a Cross-Site Scripting (XSS) vulnerability affecting the raphaelheide Donate Me software version 1.2.5 and below. The issue arises due to improper neutralization of user inputs during web page generation. An attacker can exploit this flaw to inject malicious scripts into a targeted web page, potentially stealing user data or taking control of their sessions. This can lead to serious security implications, including data theft, unauthorized access, and phishing attacks. Users are advised to update their raphaelheide Donate Me software to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.