CVE-2025-31853

Summary

CVE-2025-31853 is a Cross-site Scripting (XSS) vulnerability affecting the Erez Hadas-Sonnenschein Smartarget Popup. The flaw, which permits Stored XSS attacks, arises from improper neutralization of user input during web page generation. The vulnerability exists in versions of the Smartarget Popup from n/a through 1.4. A successful attack could lead to the execution of malicious scripts within a user's browser, potentially exposing sensitive information or taking control of their account. To mitigate the risk, affected users are urged to update to the latest version of the Smartarget Popup.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.