CVE-2025-39519

Summary

CVE-2025-39519 is a Cross-site Scripting (XSS) vulnerability affecting the rtpHarry Bulk Page Stub Creator. This issue permits attackers to inject malicious scripts into web pages generated by the software, exploiting improper input neutralization. The flaw exists from version n/a to 1.1, putting users at risk of having their browsing sessions hijacked or sensitive data exposed. Successful attacks may lead to unauthorized access to user accounts or data theft. Users are advised to update to the latest version or apply appropriate workarounds to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.