CVE-2025-30676

MEDIUM 6.1CVE-2025-30676 · Published 01/04/2025 · updated 17/06/2026

In short

CVE-2025-30676 is a MEDIUM (CVSS 6.1) vulnerability affecting ofbiz (apache).
Chance of exploitation in the next 30 days (EPSS): 67.6%, higher than 99.3% of all vulnerabilities.
Fix: update to 18.12.19 or later.

Package	Affected versions	Patched versions
ofbiz apache	`< 18.12.19`	`18.12.19`

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.19. Users are recommended to upgrade to version 18.12.19, which fixes the issue.

References

issues.apache.org/jira/browse/OFBIZ-13219 · Issue Tracking
lists.apache.org/thread/8d718qt8dqthnw1gmyxsq8glfdjklnjf · Mailing List
ofbiz.apache.org/download.html · Product
ofbiz.apache.org/security.html · Patch
openwall.com/lists/oss-security/2025/04/01/5 · Mailing List

More vulnerabilities in ofbiz

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ofbiz

apache

< 18.12.19

18.12.19

More vulnerabilities in ofbiz

See all →