{"action":"Upgrade barryvdh/laravel-translation-manager to 0.6.8 or later.","affected":[{"fixed":"0.6.8","introduced":"0"}],"component":"barryvdh/laravel-translation-manager","cve_ids":["CVE-2025-49130"],"ecosystem":"Packagist","epss":0.00417,"exploited":false,"fixed_versions":["0.6.8"],"ghsa_id":"GHSA-j226-63j7-qrqh","id":"tcs_01M5KF42F4TN2XMDAQ9XENC4EN","modified_at":"2025-06-09T16:22:09.193966Z","published_at":"2025-06-09T13:15:19Z","references":["https://osv.dev/vulnerability/GHSA-j226-63j7-qrqh","https://github.com/barryvdh/laravel-translation-manager/security/advisories/GHSA-j226-63j7-qrqh","https://nvd.nist.gov/vuln/detail/CVE-2025-49130","https://github.com/barryvdh/laravel-translation-manager/pull/475","https://github.com/barryvdh/laravel-translation-manager/commit/527446ed419f90f2319675fc5211cb8f851d7a1f","https://github.com/barryvdh/laravel-translation-manager","https://github.com/barryvdh/laravel-translation-manager/releases/tag/v0.6.8"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-j226-63j7-qrqh","url":"https://osv.dev/vulnerability/GHSA-j226-63j7-qrqh"}],"summary":"Laravel Translation Manager Vulnerable to Stored Cross-site Scripting"}