What is GHSA-4vrf-42cm-7xfw?

GHSA-4vrf-42cm-7xfw is a security advisory published by GitHub Security Advisories with Low severity. TastyIgniter vulnerable to Cross-Site Scripting

Which CVE IDs does GHSA-4vrf-42cm-7xfw cover?

GHSA-4vrf-42cm-7xfw covers the following CVE IDs: CVE-2025-61417. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-4vrf-42cm-7xfw?

GHSA-4vrf-42cm-7xfw affects 1 product, including: composer/tastyigniter/tastyigniter:\u003c= 3.7.7.

GHSA-4vrf-42cm-7xfwLow

TastyIgniter vulnerable to Cross-Site Scripting

Vendor

GitHub Security Advisories

Published

October 20, 2025

Last Modified

October 20, 2025

🔗 CVE IDs covered (1)

CVE-2025-61417 →

📋 Description

Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to perform unauthorized actions such as modifying the admin account credentials.

🎯 Affected products1

composer/tastyigniter/tastyigniter:<= 3.7.7

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-61417
https://github.com/mg7-x/CVEs/blob/main/CVE-2025-61417/README.md
https://github.com/tastyigniter/TastyIgniter
https://github.com/advisories/GHSA-4vrf-42cm-7xfw