Packagist/francoisjacquet/rosariosis CVE-2022-2036: medium 5.4, EPSS 0.90%

Cross site scripting in francoisjacquet/rosariosis

Action: Upgrade francoisjacquet/rosariosis to 9.1 or later.

composer require francoisjacquet/rosariosis:9.1

Affected

Fixed versions

Sources

• osv: GHSA-4hpr-hh77-6q9p
• https://nvd.nist.gov/vuln/detail/CVE-2022-2036
• https://github.com/francoisjacquet/rosariosis/commit/6e213b17e6ac3a3961e1eabcdaba1c892844398a
• https://github.com/francoisjacquet/rosariosis
• https://huntr.dev/bounties/c7715149-f99c-4d62-a5c6-c78bfdb41905

CVE-2022-2036 · published 2022-06-10T00:00:55Z · modified 2023-11-08T04:07:56.976591Z · JSON