CVE-2025-58271

MediumCVSS 5.9

Published: 22/09/2025(UTC)Updated: 11/10/2026(UTC)Translated: 12/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

12th percentile - higher than 12% of all known CVEs

Summary

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AnyClip Video Platform AnyClip Luminous Studio allows Stored XSS. This issue affects AnyClip Luminous Studio from n/a through <= 1.3.3.

Risk Assessment

An attacker could inject a malicious script that executes in the browsers of users visiting the video page, potentially leading to data theft, session hijacking, or malware distribution.

Recommendation

It is recommended to update AnyClip Luminous Studio to a version newer than 1.3.3 and implement proper input validation and encoding.

Other vulnerabilities in AnyClip Luminous Studio

CVE-2025-57910Medium
The AnyClip Luminous Studio plugin (anyclip-media) contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions from n/a through <= 1.3.3.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AnyClip Video Platform AnyClip Luminous Studio anyclip-media allows Stored XSS.This issue affects AnyClip Luminous Studio: from n/a through <= 1.3.3.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS