Back
CVE-2025-30357
NamelessMC Forum Topic Deletion Triggered by Unrelated User Deletion
High7.3EPSS 0.46%
- Published
- Updated
- Reserved
- Assigned by
- GitHub_M
Description
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, if a malicious user is leaving spam comments on many topics then an administrator, unable to manually remove each spam comment, may delete the malicious account. Once an administrator deletes the malicious user's account, all their posts (comments) along with the associated topics (by unrelated users) will be marked as deleted. This issue has been patched in version 2.2.0.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| GitHub_MCNA (assigner) | 3.1 | High7.3 | CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H |
| NVDNVD · Analyzed | 3.1 | Medium6.8 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N |
- EPSS (exploitation in 30 days)
- 0.46% · top 60% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.3.
Weakness
Affected products
- affected < 2.2.0
References (3)
- https://github.com/NamelessMC/Nameless/security/advisories/GHSA-22mc-7c9m-gv8h (opens in a new tab)x_refsource_CONFIRM
- https://github.com/NamelessMC/Nameless/commit/7040924e27f99aa486c619a5b4ca809051a1ca7f (opens in a new tab)x_refsource_MISC
- https://github.com/NamelessMC/Nameless/releases/tag/v2.2.0 (opens in a new tab)x_refsource_MISC
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2025-30357)Record last updated .