CVE-2025-31793

Summary

CVE-2025-31793 is a Cross-Site Scripting (XSS) vulnerability affecting the piotnetdotcom Piotnet Forms from an unknown version up to 1.0.30. This issue arises due to improper neutralization of user inputs during web page generation. An attacker can exploit this vulnerability to inject malicious scripts into a targeted website, which could lead to the theft of user data or session hijacking when a user visits the compromised site. Successful exploitation of this flaw allows an attacker to execute arbitrary scripts in the context of the affected site, potentially resulting in significant security risks for the affected organization and its users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.