CVE-2025-32136

Summary

CVE-2025-32136 is a Cross-site Scripting (XSS) vulnerability affecting ActiveCampaign, an email marketing and marketing automation solution. The flaw, which is classified as an improper neutralization of input during web page generation issue, enables attackers to inject malicious scripts into ActiveCampaign's web interface. This stored XSS vulnerability can potentially expose user data and hijack user sessions. The issue affects ActiveCampaign versions from n/a through 8.1.16. It is essential for users to update their software as soon as possible to mitigate the risk of exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.