CVE-2025-39578

Summary

CVE-2025-39578 is a Cross-site Scripting (XSS) vulnerability affecting CyberChimps Responsive Blocks. The flaw, which permits Stored XSS, arises from improper neutralization of user inputs during web page generation. Successful exploitation of this issue could enable attackers to inject malicious scripts into web pages viewed by other users, potentially resulting in data theft or unauthorized system access. Affected versions of CyberChimps Responsive Blocks span from n/a through 2.0.2. Users are advised to apply the available patches or upgrades to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.