CVE-2025-30813
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 27, 2025
CWE ID 79
Summary
CVE-2025-30813 is a Cross-site Scripting (XSS) vulnerability affecting the Listamester application from versions 2.3.5 and earlier. An attacker can exploit this Stored XSS flaw during the web page generation process, injecting malicious code into the Listamester platform that can steal user data or take control of user sessions when they visit a specially crafted website. This issue poses a serious security risk, and users are advised to apply the necessary patches or upgrades to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress