CVE-2025-32129

Summary

CVE-2025-32129 is a Cross-Site Scripting (XSS) vulnerability affecting Data443 Risk Mitigation, Inc.'s Welcome Bar software. The flaw, located in the input neutralization process during web page generation, enables attackers to inject malicious scripts into the targeted web pages. Successful exploitation of this vulnerability may lead to the theft of user data or unauthorized access to user sessions. The issue impacts all versions of Welcome Bar from n/a through 2.0.4. Users are advised to apply the necessary patches or updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.