CVE-2025-30607

Summary

CVE-2025-30607 is a Cross-Site Scripting (XSS) vulnerability affecting Name.ly Quick Localization. This issue, which impacts versions from n/a through 0.1.0, allows attackers to inject malicious scripts into web pages generated by the product. The vulnerability stems from improper neutralization of user input, enabling an adversary to execute arbitrary code in the context of the affected user. Successful exploitation could lead to data theft, session hijacking, or other serious security consequences. Users are strongly encouraged to update their Quick Localization installation to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.