CVE-2025-39423

Summary

CVE-2025-39423 is a newly identified vulnerability affecting the Jenst Add to Header plugin, which versions from n/a through 1.0 are susceptible to. This issue combines a Cross-Site Request Forgery (CSRF) weakness with a Stored Cross-Site Scripting (XSS) bug. An attacker successfully exploiting this CSRF-XSS combo could inject malicious scripts into a user's browser when they unknowingly visit a specially crafted website. The user's session could be manipulated, leading to potential unauthorized actions and sensitive data exposure. It is strongly recommended that users update their Jenst Add to Header plugin to the latest, secure version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.