Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A cross-site scripting (XSS) vulnerability in rrweb-snapshot before v2.0.0-alpha.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-45806 Cross-Site Scripting Vulnerability in rrweb-snapshot Before v2.0.0-alpha.18 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-45806
Post summary
The snippet identifies CVE-2025-45806 as an XSS flaw in rrweb‑snapshot older than v2.0.0‑alpha.18, without providing PoC, exploit code, patch information, or evidence of active exploitation.
🚨*CVE* CVE-2025-45806 A cross-site scripting (XSS) vulnerability in rrweb-snapshot before v2.0.0-alpha.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. https://www.cve.org/CVERecord?id=CVE-2025-45806 ----- Traducción: CVE-2025-45806 Una vul… http://infoflow.cloud`
Post summary
The post discloses a new XSS vulnerability (CVE-2025-45806) in rrweb-snapshot versions prior to v2.0.0-alpha.18 with details on its effect but provides no evidence of exploitation or remediation.
CVE-2025-45806 A cross-site scripting (XSS) vulnerability in rrweb-snapshot before v2.0.0-alpha.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. https://www.cve.org/CVERecord?id=CVE-2025-45806
Post summary
The CVE-2025-45806 XSS vulnerability in rrweb‑snapshot is disclosed, enabling arbitrary script execution via crafted payloads, with no PoC, exploit code, or active exploitation reported.