CVE-2025-30522

Summary

CVE-2025-30522 is a Cross-Site Request Forgery (CSRF) vulnerability discovered in Damian Orzol's Contact Form 7 Material Design. This weakness permits an attacker to execute Stored XSS (Cross-Site Scripting) attacks against unsuspecting users. Impacted versions of Contact Form 7 Material Design range from the initial release through 1.0.0. Successful exploitation can lead to the injection of malicious scripts into web pages viewed by the victim, potentially stealing sensitive information or installing malware. Users are advised to upgrade to the latest version or consider implementing additional security measures to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.