CVE-2025-30191 is a medium severity vulnerability involving malicious email content that can be used to perform a redressing attack. This attack tricks users into performing unintended actions or disclosing sensitive information to third parties. The vulnerability arises from insufficient sanitization of attribute values containing HTML fragments, which has now been addressed by denying such values in the sanitization process. No public exploits are known at this time.