CVE-2025-30603
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2025-30603 is a Cross-Site Request Forgery (CSRF) vulnerability affecting DEJAN CopyLink, version n/a through 1.1. This issue enables an attacker to execute Stored XSS (Cross-Site Scripting) attacks on unsuspecting users. The CSRF flaw allows an attacker to manipulate a victim's browser into sending unintended requests, potentially leading to the execution of malicious scripts within the user's session. The Stored XSS component exacerbates the risk by allowing the attacker to inject and store malicious scripts within the application, which can then be executed whenever the vulnerable page is accessed by the victim.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress