CVE-2025-46540

Summary

CVE-2025-46540 is a Cross-Site Scripting (XSS) vulnerability affecting the Chris Mok GNA Search Shortcode. This issue, which impacts versions from n/a through 0.9.5, allows an attacker to inject malicious scripts into web pages generated by the shortcode. As a result, unsuspecting users visiting affected websites could have their browsers manipulated, potentially leading to data theft or other malicious activities. This vulnerability can be exploited through stored XSS attacks, making it a serious concern for websites using the affected version of the Chris Mok GNA Search Shortcode.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.