Cross-site Scripting Vulnerability in ACF: Yandex Maps Field by Unreal Themes
CVE-2025-30930

5.9MEDIUM

Key Information:

Vendor

WordPress
Status
Acf: Yandex Maps Field
Vendor
CVE Published:
6 June 2025

What is CVE-2025-30930?

The ACF: Yandex Maps Field by Unreal Themes is susceptible to a Cross-site Scripting (XSS) vulnerability that allows attackers to inject and execute malicious scripts. This affects versions from n/a up to 1.1, potentially allowing for stored XSS attacks, which can lead to unauthorized access and manipulation of sensitive user data. Proper input sanitization measures are essential to mitigate this risk and protect end-users from exploitation.

Affected Version(s)

ACF: Yandex Maps Field <= 1.1

References

https://patchstack.com/database/wordpress/plugin/acf-yand...
vdb-entry

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nabil Irawan (Patchstack Alliance)
.