CVE-2025-46226

Summary

CVE-2025-46226 is a Cross-site Scripting (XSS) vulnerability affecting the ferranfg MPL-Publisher software from an unknown version through 2.18.0. This issue arises due to improper neutralization of user input during web page generation. An attacker can exploit this flaw by injecting malicious scripts into the application, potentially stealing sensitive data or taking control of user sessions. Successful exploitation requires the user to visit a specially crafted webpage, posing a significant threat to organizations and individuals using the affected software. It is strongly recommended to update to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.