Description

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the forum allows users to post iframe elements inside forum topics/comments/feed with no restriction on the iframe's width and height attributes. This allows an authenticated attacker to perform a UI-based denial of service (DoS) by injecting oversized iframes that block the forum UI and disrupt normal user interactions. This issue has been patched in version 2.2.0.

INFO

Published Date :

2025-04-18T15:50:49.309Z

Last Modified :

2025-04-18T16:04:53.740Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2025-30158 vulnerability.

Vendors Products
Namelessmc
  • Nameless
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-30158.

URL Resource
https://github.com/NamelessMC/Nameless/commit/caa42a975338a13fbc1658e8c440108f16135643 cve-icon cve-icon
https://github.com/NamelessMC/Nameless/releases/tag/v2.2.0 cve-icon cve-icon
https://github.com/NamelessMC/Nameless/security/advisories/GHSA-2prx-rgr7-hq5f cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact