{"action":"Upgrade melisplatform/melis-cms to 5.3.4 or later.","affected":[{"fixed":"5.3.4","introduced":"0"}],"component":"melisplatform/melis-cms","cve_ids":["CVE-2025-10351"],"ecosystem":"Packagist","epss":0.00413,"exploited":false,"fixed_versions":["5.3.4"],"ghsa_id":"GHSA-mrmx-jfw8-qhgv","id":"tcs_01M5KF5TA3W0269CYRVV01NETA","modified_at":"2025-10-09T16:12:23.865536Z","published_at":"2025-10-08T12:30:26Z","references":["https://osv.dev/vulnerability/GHSA-mrmx-jfw8-qhgv","https://nvd.nist.gov/vuln/detail/CVE-2025-10351","https://github.com/melisplatform/melis-cms/commit/42d36326d9f6400b91db574483add2747af1db21","https://github.com/ivansmc00/CVE-2025-10351-POC","https://github.com/melisplatform/melis-cms","https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-melis-platform"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-mrmx-jfw8-qhgv","url":"https://osv.dev/vulnerability/GHSA-mrmx-jfw8-qhgv"},{"source":"nvd","source_id":"CVE-2025-10351","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10351"}],"summary":"Melis Platform CMS SQL Injection"}