{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.9.1"}],"component":"geshi/geshi","cve_ids":["CVE-2025-2123"],"ecosystem":"Packagist","epss":0.00475,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-pr6q-g5gv-qgr7","id":"tcs_01M5KF6MTSP772R8NX27ENZMWB","modified_at":"2025-06-23T23:27:09.742296Z","published_at":"2025-03-09T15:31:20Z","references":["https://osv.dev/vulnerability/GHSA-pr6q-g5gv-qgr7","https://nvd.nist.gov/vuln/detail/CVE-2025-2123","https://github.com/GeSHi/geshi-1.0/issues/159","https://github.com/GeSHi/geshi-1.0","https://vuldb.com/?ctiid.299036","https://vuldb.com/?id.299036","https://vuldb.com/?submit.507418"],"severity":{"label":"low","score":3.5},"sources":[{"source":"osv","source_id":"GHSA-pr6q-g5gv-qgr7","url":"https://osv.dev/vulnerability/GHSA-pr6q-g5gv-qgr7"}],"summary":"GeSHi XSS possible in the get_var function of /contrib/cssgen.php"}