CVE-2025-30612

Summary

CVE-2025-30612 is a newly disclosed vulnerability in the Replace Default Words component of mandegarweb. This issue combines Cross-Site Request Forgery (CSRF) and Stored XSS (Cross-Site Scripting) vulnerabilities. An attacker can exploit the CSRF weakness to manipulate the targeted user's actions without their knowledge, and the Stored XSS component allows the injection of malicious scripts that can persist even after the user logs out. This vulnerability affects all versions of Replace Default Words from n/a through 1.3, making it crucial for users to apply the necessary patches as soon as possible to secure their systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.