{"action":"Upgrade codingms/additional-tca to 1.15.17 or later.","affected":[{"fixed":"1.16.9","introduced":"1.16.0"},{"fixed":"1.15.17","introduced":"1.7.0"}],"component":"codingms/additional-tca","cve_ids":["CVE-2025-30083"],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.16.9","1.15.17"],"ghsa_id":"GHSA-rrh3-cgmx-w62f","id":"tcs_01M5KF8HBK5AY9RZ3R8GPPQ4SH","modified_at":"2025-03-19T01:42:25.449027Z","published_at":"2025-03-19T01:37:06Z","references":["https://osv.dev/vulnerability/GHSA-rrh3-cgmx-w62f","https://github.com/FriendsOfPHP/security-advisories/blob/master/codingms/additional-tca/CVE-2025-30083.yaml","https://gitlab.com/codingms/typo3-public/additional_tca","https://typo3.org/security/advisory/typo3-ext-sa-2025-002"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-rrh3-cgmx-w62f","url":"https://osv.dev/vulnerability/GHSA-rrh3-cgmx-w62f"}],"summary":"Additional TCA Allows Cross-Site Scripting (XSS)"}