CVE-2025-30572

Summary

CVE-2025-30572 is a newly disclosed vulnerability affecting the Simple Rating system developed by Igor Yavych. This issue combines two serious threats: a Cross-Site Request Forgery (CSRF) weakness and Stored Cross-Site Scripting (XSS). The CSRF vulnerability allows an attacker to force an unwilling user to perform an unwanted action on a web application, while Stored XSS enables the execution of malicious scripts from a website, potentially leading to stolen user credentials or data theft. The Simple Rating system, used from version n/a through 1.4, is susceptible to these attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.