Medium severity6.1NVD Advisory· Published Apr 1, 2025· Updated Jun 17, 2026

CVE-2025-30676

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache OFBiz.

This issue affects Apache OFBiz: before 18.12.19.

Users are recommended to upgrade to version 18.12.19, which fixes the issue.

LLM-synthesized narrative grounded in this CVE's description and references.

Apache/Ofbiz3 versions
cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*range: <18.12.19
- (no CPE)range: <18.12.19
- (no CPE)range: 0

No linked articles in our index yet.