{"action":"Upgrade nitsan/ns-backup to 13.0.1 or later.","affected":[{"fixed":"13.0.1","introduced":"0"}],"component":"nitsan/ns-backup","cve_ids":["CVE-2025-48206"],"ecosystem":"Packagist","epss":0.00242,"exploited":false,"fixed_versions":["13.0.1"],"ghsa_id":"GHSA-xg53-mhh9-3cq7","id":"tcs_01M5KFB04W5DSBDXJX9N2MNAKD","modified_at":"2026-09-10T03:50:24.747665540Z","published_at":"2025-05-21T18:33:30Z","references":["https://osv.dev/vulnerability/GHSA-xg53-mhh9-3cq7","https://nvd.nist.gov/vuln/detail/CVE-2025-48206","https://github.com/nitsan-technologies/ns_backup/commit/67b8102a19e8e516dc4228f5c42f9e4fba5046cb","https://github.com/nitsan-technologies/ns_backup","https://typo3.org/security/advisory/typo3-ext-sa-2025-007"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-xg53-mhh9-3cq7","url":"https://osv.dev/vulnerability/GHSA-xg53-mhh9-3cq7"},{"source":"nvd","source_id":"CVE-2025-48206","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48206"}],"summary":"The Backup Plus extension for TYPO3 (ns_backup) allows XSS"}