Cross-site Scripting Vulnerability in Brizy Pro by NotFound

CVE-2025-22763

What is CVE-2025-22763?

The Brizy Pro plugin, developed by NotFound, is affected by an improper neutralization of input during web page generation, leading to a reflected cross-site scripting (XSS) vulnerability. This flaw can allow attackers to inject malicious scripts into web pages, potentially affecting users accessing the vulnerable site. This issue affects all versions of Brizy Pro up to 2.6.1, posing significant security risks for its users and necessitating immediate action to mitigate the exposure.

References