The vulnerability identified as CVE-2025-30577 affects the mendibass Browser Address Bar Color extension (versions up to 3.3). It is a Cross-Site Request Forgery (CSRF) issue that enables stored cross-site scripting (XSS) attacks. The CVSS 3.1 base score is 7.1, reflecting a network attack vector with low complexity and no privileges required, but requiring user interaction. The vulnerability impacts confidentiality, integrity, and availability of the affected system. There is no vendor advisory or patch information available at this time, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow an attacker to execute stored XSS attacks via CSRF, potentially leading to unauthorized actions performed in the context of the victim user, and compromise of confidentiality, integrity, and availability. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when interacting with untrusted content and consider disabling or removing the affected Browser Address Bar Color extension to mitigate risk.