CVE-2025-23847

CVE-2025-23847 is a cross-site scripting (XSS) vulnerability found in the NotFound Site Launcher. This vulnerability stems from improper neutralization of user input during web page generation. Exploitation of this flaw allows for reflected XSS attacks. Vulnerable versions of Site Launcher range from n/a up to and including 0.9.4. A cross-site scripting vulnerability, like CVE-2025-23847, can allow attackers to inject malicious scripts into websites. These scripts can then be executed by unsuspecting users who visit the compromised site. The consequences of a successful XSS attack can vary, but often include session hijacking, cookie theft, redirection to malicious websites, and modification of website content.