CVE-2025-30786

Summary

CVE-2025-30786 is a Cross-Site Scripting (XSS) vulnerability affecting Quotes llama from an unknown version up to 3.1.0. This issue occurs due to improper neutralization of user input during web page generation. An attacker can exploit this bug to inject malicious scripts into a victim's browser, potentially leading to the theft of sensitive information or unauthorized access to user accounts. The impact of this vulnerability extends to any user visiting a compromised web page. Users are advised to update Quotes llama to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.