CVE-2025-57910

MediumCVSS 6.5

Published: 22/09/2025(UTC)Updated: 30/09/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

17th percentile - higher than 17% of all known CVEs

Summary

The AnyClip Luminous Studio plugin (anyclip-media) contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions from n/a through <= 1.3.3.

Risk Assessment

An attacker can inject a malicious script that is stored and executed in the browser of a user visiting the site. This could lead to session theft or other sensitive data disclosure.

Recommendation

Update the AnyClip Luminous Studio plugin to the latest version that fixes this vulnerability. Implement proper input filtering and encoding.

Other vulnerabilities in AnyClip Luminous Studio

CVE-2025-58271Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AnyClip Video Platform AnyClip Luminous Studio allows Stored XSS. This issue affects AnyClip Luminous Studio from n/a through <= 1.3.3.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AnyClip Video Platform AnyClip Luminous Studio anyclip-media allows Stored XSS.This issue affects AnyClip Luminous Studio: from n/a through <= 1.3.3.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS