{"action":"Upgrade ibexa/admin-ui to 4.6.25 or later.","affected":[{"fixed":"5.0.3","introduced":"5.0.0"},{"fixed":"4.6.25","introduced":"4.6.0"}],"component":"ibexa/admin-ui","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["5.0.3","4.6.25"],"ghsa_id":"GHSA-2mx6-fq24-g2mh","id":"tcs_01M5KES3D1KQE7DYB3137F93TN","modified_at":"2025-10-17T18:18:53.182290Z","published_at":"2025-10-17T17:59:31Z","references":["https://osv.dev/vulnerability/GHSA-2mx6-fq24-g2mh","https://github.com/ibexa/admin-ui/security/advisories/GHSA-2mx6-fq24-g2mh","https://developers.ibexa.co/security-advisories/ibexa-sa-2025-004-xss-and-enumeration-vulnerabilities-in-back-office","https://github.com/ibexa/admin-ui"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-2mx6-fq24-g2mh","url":"https://osv.dev/vulnerability/GHSA-2mx6-fq24-g2mh"}],"summary":"ibexa/admin-ui has an XSS vulnerability in Cancel/Reschedule future publication modal"}