CVE-2025-30357

6.8 mediumEPSS 0.5%

Medium (6.8) in namelessmc nameless. EPSS 0.5% chance of exploitation in the next 30 days.

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, if a malicious user is leaving spam comments on many topics then an administrator, unable to manually remove each spam comment, may delete the malicious account. Once an administrator deletes the malicious user's account, all their posts (comments) along with the associated topics (by unrelated users) will be marked as deleted. This issue has been patched in version 2.2.0.

Severity

CVSS 3.1

6.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-706
Published: 2025-04-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

namelessmc:nameless

References

https://github.com/NamelessMC/Nameless/commit/7040924e27f99aa486c619a5b4ca809051a1ca7f
https://github.com/NamelessMC/Nameless/releases/tag/v2.2.0
https://github.com/NamelessMC/Nameless/security/advisories/GHSA-22mc-7c9m-gv8h

Check your stack JSON