CVE-2025-30558

Summary

CVE-2025-30558 is a newly disclosed vulnerability affecting the ANAC XML Render software. This issue involves a Cross-Site Request Forgery (CSRF) vulnerability that also includes Stored XSS capabilities. The CSRF weakness allows unauthorized users to submit malicious requests on behalf of other users, while the Stored XSS component enables attackers to inject malicious scripts into a web page that will be executed when other users visit the page. The ANAC XML Render software is impacted from its unspecified initial version up to and including 1.5.7. Users are strongly advised to apply the necessary patches or updates as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.