The vulnerability CVE-2025-30975 in SaifuMak Add Custom Codes (<= 4.80) is a code injection issue caused by improper control over code generation. This flaw allows remote attackers with low privileges to inject and execute arbitrary code without user interaction. The CVSS 3.1 base score is 7.5, reflecting high impact on confidentiality, integrity, and availability, but requiring high attack complexity. No patch or official fix details are available, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation could lead to full compromise of the affected system, including unauthorized disclosure, modification, or destruction of data. The attack requires low privileges but has high complexity, and no user interaction is needed. This elevates the risk of remote code execution and system takeover if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or workaround information is provided, users should monitor official SaifuMak communications for updates. Until a fix is available, consider restricting access to the vulnerable component and applying any available compensating controls recommended by the vendor.