{"action":"Upgrade librenms/librenms to 25.5.0 or later.","affected":[{"fixed":"25.5.0","introduced":"0"}],"component":"librenms/librenms","cve_ids":["CVE-2025-47931"],"ecosystem":"Packagist","epss":0.10122,"exploited":false,"fixed_versions":["25.5.0"],"ghsa_id":"GHSA-hxw5-9cc5-cmw5","id":"tcs_01M5KF4206CTXNV86MDAP4M34Z","modified_at":"2025-05-19T17:12:12.339286Z","published_at":"2025-05-19T16:22:53Z","references":["https://osv.dev/vulnerability/GHSA-hxw5-9cc5-cmw5","https://github.com/librenms/librenms/security/advisories/GHSA-hxw5-9cc5-cmw5","https://nvd.nist.gov/vuln/detail/CVE-2025-47931","https://github.com/librenms/librenms/pull/17603","https://github.com/librenms/librenms/commit/88fe1a7abdb500d9a2d4c45f9872df54c9ff8062","https://github.com/librenms/librenms","https://github.com/librenms/librenms/blob/25.4.0/includes/html/pages/addhost.inc.php#L284"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-hxw5-9cc5-cmw5","url":"https://osv.dev/vulnerability/GHSA-hxw5-9cc5-cmw5"},{"source":"nvd","source_id":"CVE-2025-47931","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47931"}],"summary":"LibreNMS stored Cross-site Scripting vulnerability in poller group name"}