CVE-2025-32615
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Apr 17, 2025
CWE ID 79
Summary
CVE-2025-32615 is a Cross-site Scripting (XSS) vulnerability affecting the Clinked Client Portal. The flaw, located within the web page generation process, allows an attacker to inject malicious scripts into the portal. Any user visiting the compromised page could unwittingly execute the scripts, leading to potential data theft or unauthorized system access. The issue spans from version n/a to 1.10 of the Clinked Client Portal. It is imperative that users and administrators apply the necessary patches to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.