CVE-2025-39530

Summary

CVE-2025-39530 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the dsky Site Search 360 software. The issue permits Stored XSS (Cross-Site Scripting) attacks, which can inject malicious scripts into a user's browser when they visit a specially crafted website. This vulnerability exists in versions of Site Search 360 from n/a through 2.1.7 and poses a serious security risk to users who rely on this search software. Successful exploitation could lead to information disclosure, unauthorized actions, or session hijacking, making it crucial for users to upgrade to a patched version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.