CVE-2025-32131

Summary

CVE-2025-32131 is a Cross-site Scripting (XSS) vulnerability affecting Social Intents from version n/a through 1.6.14. Maliciously crafted input data can be stored and subsequently executed in a user's web browser, leading to potential theft of sensitive information or unauthorized actions when the user visits a specific website. The flaw occurs during web page generation, as the Social Intents plugin fails to properly neutralize user-supplied data. This poses a serious risk to websites using the affected version of Social Intents. Users are advised to update to the latest version as soon as possible to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.