CVE-2025-2699

Name of the Vulnerable Software and Affected Versions GetmeUK ContentTools versions up to 1.6.16

Description A problematic issue was found in the Image Handler component, where the manipulation of the onload argument leads to cross-site scripting. This issue can be exploited remotely. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations For GetmeUK ContentTools versions up to 1.6.16, as a temporary workaround, consider restricting the use of the onload argument in the Image Handler component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.