CVE-2025-30908

Summary

CVE-2025-30908 is a newly disclosed vulnerability affecting the Shamalli Web Directory Free software. This issue involves a Cross-Site Request Forgery (CSRF) vulnerability that also includes a Stored XSS component. The CSRF weakness allows attackers to force unintended actions from the victim's browser, while the Stored XSS component enables an attacker to inject malicious scripts into web pages, potentially leading to serious data breaches or unauthorized access to user accounts. The vulnerability affects versions of the Web Directory Free software from n/a through 1.7.6. Users are strongly encouraged to update their installations to the latest, secure version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.