{"action":"Upgrade ezsystems/ezplatform-admin-ui to 2.3.39 or later.","affected":[{"fixed":"2.3.39","introduced":"2.3.0"}],"component":"ezsystems/ezplatform-admin-ui","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.3.39"],"ghsa_id":"GHSA-99c7-c3mw-mxhv","id":"tcs_01M5KEZWG0QYGHKMFPJ522C3PY","modified_at":"2025-10-17T18:14:24.714719Z","published_at":"2025-10-17T17:58:44Z","references":["https://osv.dev/vulnerability/GHSA-99c7-c3mw-mxhv","https://github.com/ezsystems/ezplatform-admin-ui/security/advisories/GHSA-99c7-c3mw-mxhv","https://developers.ibexa.co/security-advisories/ibexa-sa-2025-004-xss-and-enumeration-vulnerabilities-in-back-office","https://github.com/ezsystems/ezplatform-admin-ui"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-99c7-c3mw-mxhv","url":"https://osv.dev/vulnerability/GHSA-99c7-c3mw-mxhv"}],"summary":"ezsystems/ezplatform-admin-ui has an XSS vulnerability in Cancel/Reschedule future publication modal"}