The vulnerability CVE-2025-52780 affects the Logo Manager For Samandehi plugin developed by Mohammad Parsa. It is a Cross-Site Request Forgery (CSRF) issue that enables an attacker to execute stored Cross-Site Scripting (XSS) attacks by tricking an authenticated user into submitting a crafted request. The affected versions are up to and including 0.5. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges but requires user interaction. The vulnerability impacts confidentiality, integrity, and availability of the affected system. No patch or official remediation information is currently provided.

Successful exploitation of this vulnerability can allow an attacker to execute stored XSS attacks via CSRF, potentially leading to unauthorized actions performed in the context of an authenticated user. This can result in data disclosure, modification, or disruption of service. The CVSS score of 7.1 reflects a high severity with impacts on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting access to the affected plugin to mitigate risk. Avoid interacting with untrusted links or sites that could trigger CSRF attacks. Monitor official sources for updates or patches from the vendor.