CVE-2025-30918

Summary

CVE-2025-30918 is a Cross-site Scripting (XSS) vulnerability affecting the codemacher Structured Content software from version n/a through 1.6.3. This issue arises due to improper neutralization of user input during web page generation, enabling attackers to inject malicious scripts into a targeted site. These scripts can then be executed in users' browsers when they visit the site, potentially leading to data theft, unauthorized access, or other malicious activities. This vulnerability poses a significant risk to organizations using the affected software and requires immediate attention and mitigation efforts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.