{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"7.1.0-rc4"}],"component":"funadmin/funadmin","cve_ids":["CVE-2026-2897"],"ecosystem":"Packagist","epss":0.00241,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rfh7-7v27-6p9r","id":"tcs_01M5KF86VQM5MZ2GZHA7HR7Y2N","modified_at":"2026-02-26T16:11:19.861600Z","published_at":"2026-02-22T03:30:26Z","references":["https://osv.dev/vulnerability/GHSA-rfh7-7v27-6p9r","https://nvd.nist.gov/vuln/detail/CVE-2026-2897","https://github.com/I4m6da/CVE/issues/4","https://github.com/I4m6da/CVE/issues/4#issue-3890421022","https://github.com/funadmin/funadmin","https://vuldb.com/?ctiid.347208","https://vuldb.com/?id.347208","https://vuldb.com/?submit.753975"],"severity":{"label":"low","score":2.4},"sources":[{"source":"osv","source_id":"GHSA-rfh7-7v27-6p9r","url":"https://osv.dev/vulnerability/GHSA-rfh7-7v27-6p9r"}],"summary":"funadmin: XSS through Value argument in Backend Interface component"}