{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"7.13.0"}],"component":"phppgadmin/phppgadmin","cve_ids":["CVE-2025-60798"],"ecosystem":"Packagist","epss":0.00307,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-g6xh-wrpf-v6j6","id":"tcs_01M5KF2DWC23HERTZY5RS04XV7","modified_at":"2025-11-21T19:15:52Z","published_at":"2025-11-20T15:30:24Z","references":["https://osv.dev/vulnerability/GHSA-g6xh-wrpf-v6j6","https://nvd.nist.gov/vuln/detail/CVE-2025-60798","https://github.com/phppgadmin/phppgadmin","https://github.com/phppgadmin/phppgadmin/blob/master/display.php#L396","https://github.com/pr0wl1ng/security-advisories/blob/main/CVE-2025-60797.md","https://github.com/pr0wl1ng/security-advisories/blob/main/CVE-2025-60798.md"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-g6xh-wrpf-v6j6","url":"https://osv.dev/vulnerability/GHSA-g6xh-wrpf-v6j6"}],"summary":"phppgadmin contains a SQL injection vulnerability"}