CVE-2025-30613

Summary

CVE-2025-30613 is a Cross-site Scripting (XSS) vulnerability affecting N-Media's Nmedia MailChimp software. The issue stems from improper neutralization of user input during web page generation. Attackers can exploit this vulnerability to inject malicious scripts into affected MailChimp instances, potentially stealing user data or taking control of user sessions. The vulnerability impacts all versions of Nmedia MailChimp from n/a through 5.4. It is essential for users to update their MailChimp installations as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.