CVE-2025-30565

Summary

CVE-2025-30565 is a newly disclosed vulnerability that affects the karrikas banner-manager. This issue involves a Cross-Site Request Forgery (CSRF) weakness, which can lead to Stored XSS (Cross-Site Scripting) attacks. An attacker can exploit this vulnerability by manipulating a user into clicking a malicious link, which in turn allows the attacker to inject malicious scripts into the targeted website. The banner-manager versions from n/a through 16.04.19 are reportedly impacted by this flaw. Users are strongly advised to update their systems as soon as possible to mitigate the risks associated with this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.