Multiple Cross-Site Scripting Vulnerabilities in Vendor Products

CVE-2025-23175

What is CVE-2025-23175?

This vulnerability encompasses multiple Cross-Site Scripting (XSS) flaws that can be exploited by attackers to inject malicious scripts into web pages viewed by users. As a result, sensitive information may be compromised, including cookies and session tokens. Targeted at Vendor products, these vulnerabilities pose a risk to both user data and application integrity, emphasizing the need for immediate attention and remediation.

References