CVE-2025-30158

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the forum allows users to post iframe elements inside forum topics/comments/feed with no restriction on the iframe's width and height attributes. This allows an authenticated attacker ...

CVE-2025-30158

creationtimestamp| type| source ---|---|--- 2025-04-18 15:58:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12467 2025-04-18 16:34:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln42fpgtpb2l 2025-04-18 17:27:57+00:00| seen|...

CVE-2025-30158 NamelessMC Forum iframe width/height abuse causing UI-based Denial of Service

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the forum allows users to post iframe elements inside forum topics/comments/feed with no restriction on the iframe's width and height attributes. This allows an authenticated attacker ...

CVE-2025-30158

CVE-2025-30158 (NamelessMC) affects NamelessMC

CVE-2025-30158 NamelessMC Forum iframe width/height abuse causing UI-based Denial of Service

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the forum allows users to post iframe elements inside forum topics/comments/feed with no restriction on the iframe's width and height attributes. This allows an authenticated attacker ...