CVE-2025-31890

Summary

CVE-2025-31890 is a Cross-site Scripting (XSS) vulnerability affecting Mashi Simple Map No Api. The flaw, which is a result of improper neutralization of user input during web page generation, enables attackers to inject and execute malicious scripts in users' browsers. This stored XSS issue affects Simple Map No Api versions from n/a through 1.9. Successful exploitation could lead to unauthorized access to sensitive information, session hijacking, or other malicious activities. It is strongly recommended that users update to the latest version of the software as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.