CVE-2025-39414

Summary

CVE-2025-39414 is a newly disclosed vulnerability affecting the Mike spam-stopper software. This issue combines two serious web application security flaws: Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS). The CSRF vulnerability allows an attacker to manipulate a user's session without their knowledge, while the Stored XSS vulnerability enables an attacker to inject malicious code into a web page, which remains active even after the page is reloaded. These vulnerabilities exist in versions of spam-stopper from n/a to 3.1.3. Users are advised to update their software as soon as possible to mitigate the risks associated with these flaws.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.