CVE-2025-30578

Summary

CVE-2025-30578 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the hotvanrod AdSense Privacy Policy. An attacker could exploit this issue to inject Stored Cross-Site Scripting (XSS) code into the affected privacy policy. Successful exploitation could result in unauthorized actions being performed on behalf of the user, such as account takeover or information disclosure. The vulnerability affects AdSense Privacy Policy versions from n/a through 1.1.1. Users are advised to update their privacy policies as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.