CVE-2025-30787

Summary

CVE-2025-30787 is a newly discovered vulnerability affecting the Eli EZ SQL Reports Shortcode Widget and DB Backup. This issue involves a Cross-Site Request Forgery (CSRF) vulnerability, which can be exploited to carry out unwanted actions on a user's behalf. Additionally, this vulnerability includes a Stored XSS (Cross-Site Scripting) component, making it even more dangerous as an attacker can inject malicious scripts into a web page viewed by other users. The flaw exists in versions of the EZ SQL Reports Shortcode Widget and DB Backup ranging from n/a to 5.25.08. Immediate updates are recommended to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.