{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"7.13.0"}],"component":"phppgadmin/phppgadmin","cve_ids":["CVE-2025-60796"],"ecosystem":"Packagist","epss":0.0025,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h369-cpjj-qfff","id":"tcs_01M5KF3868PJZS8BHKVJ83340R","modified_at":"2025-11-20T18:59:14.818177Z","published_at":"2025-11-20T15:30:23Z","references":["https://osv.dev/vulnerability/GHSA-h369-cpjj-qfff","https://nvd.nist.gov/vuln/detail/CVE-2025-60796","https://github.com/phppgadmin/phppgadmin","https://github.com/phppgadmin/phppgadmin/blob/master/admin.php#L35","https://github.com/phppgadmin/phppgadmin/blob/master/indexes.php#L29","https://github.com/phppgadmin/phppgadmin/blob/master/sequences.php#L316","https://github.com/pr0wl1ng/security-advisories/blob/main/CVE-2025-60796.md"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-h369-cpjj-qfff","url":"https://osv.dev/vulnerability/GHSA-h369-cpjj-qfff"},{"source":"nvd","source_id":"CVE-2025-60796","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-60796"}],"summary":"phppgadmin vulnerable to Cross-site Scripting"}