{"action":"Upgrade sulu/sulu to 2.5.21 or later.","affected":[{"fixed":"2.5.21","introduced":"2.0.0-RC1"},{"fixed":"2.6.5","introduced":"2.6.0-RC1"}],"component":"sulu/sulu","cve_ids":["CVE-2024-47618"],"ecosystem":"Packagist","epss":0.0035,"exploited":false,"fixed_versions":["2.5.21","2.6.5"],"ghsa_id":"GHSA-255w-87rh-rg44","id":"tcs_01M5KERHPMY8ANNXXJ8N84XPQ6","modified_at":"2024-10-18T14:56:59.752972Z","published_at":"2024-10-03T18:25:40Z","references":["https://osv.dev/vulnerability/GHSA-255w-87rh-rg44","https://github.com/sulu/sulu/security/advisories/GHSA-255w-87rh-rg44","https://nvd.nist.gov/vuln/detail/CVE-2024-47618","https://github.com/sulu/sulu/commit/ca72f75eebe41ea7726624d8aea7da6c425f1eb9","https://github.com/sulu/sulu"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-255w-87rh-rg44","url":"https://osv.dev/vulnerability/GHSA-255w-87rh-rg44"}],"summary":"Cross-site Scripting via uploaded SVG"}