CVE-2025-32132

Summary

CVE-2025-32132 is a Cross-site Scripting (XSS) vulnerability affecting FunnelCockpit. The flaw, referred to as Stored XSS, resides in the webpage generation process of FunnelCockpit. An attacker can exploit this vulnerability by injecting malicious scripts into a FunnelCockpit webpage, which would be executed on unsuspecting users' browsers. This issue poses a significant risk as it allows attackers to steal sensitive information, perform unauthorized actions, or redirect users to malicious sites. The vulnerability affects FunnelCockpit versions from n/a through 1.4.2. Users are advised to upgrade to a patched version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.