Stored Cross-Site Scripting Vulnerability in N-Media MailChimp Plugin
CVE-2025-30613

6.5MEDIUM

Key Information:

Vendor

N-media

Status
Nmedia Mailchimp
Vendor
CVE Published:
1 April 2025

What is CVE-2025-30613?

The N-Media MailChimp plugin is vulnerable to Stored Cross-Site Scripting (XSS) due to improper input handling in web page generation. This vulnerability allows attackers to inject malicious scripts that could be executed in the browser of users accessing affected instances. It is crucial for site administrators to review their plugin versions and secure their applications to prevent potential exploitation.

Affected Version(s)

Nmedia MailChimp <= 5.4

References

https://patchstack.com/database/wordpress/plugin/nmedia-m...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Thi Huyen Trang - Skalucy (Patchstack Alliance)
.