CVE-2025-32534

Name of the Vulnerable Software and Affected Versions: Workbox Video from Vimeo & Youtube versions 3.2.2 and earlier

Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting (XSS). This enables attackers to inject malicious scripts into web pages.

Recommendations: For versions 3.2.2 and earlier, update to a version later than 3.2.2 to resolve the issue. As a temporary workaround, consider restricting user input in the affected API endpoints to minimize the risk of exploitation.