{"action":"Upgrade mobiledetect/mobiledetectlib to 2.8.32 or later.","affected":[{"fixed":"2.8.32","introduced":"0"}],"component":"mobiledetect/mobiledetectlib","cve_ids":["CVE-2018-25080"],"ecosystem":"Packagist","epss":0.02655,"exploited":false,"fixed_versions":["2.8.32"],"ghsa_id":"GHSA-r77c-qv68-j3pp","id":"tcs_01M5KF80J5APEXRYSP0QC2NMRW","modified_at":"2025-04-16T16:30:45.663323Z","published_at":"2023-02-04T09:30:21Z","references":["https://osv.dev/vulnerability/GHSA-r77c-qv68-j3pp","https://nvd.nist.gov/vuln/detail/CVE-2018-25080","https://github.com/serbanghita/Mobile-Detect/pull/741","https://github.com/serbanghita/Mobile-Detect/commit/31818a441b095bdc4838602dbb17b8377d1e5cce","https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2018-25080.md","https://github.com/serbanghita/Mobile-Detect","https://github.com/serbanghita/Mobile-Detect/releases/tag/2.8.32","https://vuldb.com/?ctiid.220061","https://vuldb.com/?id.220061"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-r77c-qv68-j3pp","url":"https://osv.dev/vulnerability/GHSA-r77c-qv68-j3pp"}],"summary":"Cross-site Scripting in MobileDetect"}