{"action":"Upgrade dnadesign/silverstripe-elemental to 5.3.12 or later.","affected":[{"fixed":"5.3.12","introduced":"2.1.2"}],"component":"dnadesign/silverstripe-elemental","cve_ids":["CVE-2025-25197"],"ecosystem":"Packagist","epss":0.00309,"exploited":false,"fixed_versions":["5.3.12"],"ghsa_id":"GHSA-x8xm-c7p8-2pj2","id":"tcs_01M5KFAWEN3SHK69P6T62E2MCS","modified_at":"2025-04-10T23:14:13.484639Z","published_at":"2025-04-10T13:38:53Z","references":["https://osv.dev/vulnerability/GHSA-x8xm-c7p8-2pj2","https://github.com/silverstripe/silverstripe-elemental/security/advisories/GHSA-x8xm-c7p8-2pj2","https://nvd.nist.gov/vuln/detail/CVE-2025-25197","https://github.com/silverstripe/silverstripe-elemental/pull/1345","https://github.com/silverstripe/silverstripe-elemental/commit/34ff4ed498ccab94cc5f55ef9a56c37f491eda1d","https://github.com/FriendsOfPHP/security-advisories/blob/master/dnadesign/silverstripe-elemental/CVE-2025-25197.yaml","https://github.com/silverstripe/silverstripe-elemental","https://www.silverstripe.org/download/security-releases/cve-2025-25197"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-x8xm-c7p8-2pj2","url":"https://osv.dev/vulnerability/GHSA-x8xm-c7p8-2pj2"}],"summary":"Silverstripe cross-site scripting (XSS) attack in elemental \"Content blocks in use\" report"}