{"action":"Upgrade intelliants/subrion to 4.1.4 or later.","affected":[{"fixed":"4.1.4","introduced":"0"}],"component":"intelliants/subrion","cve_ids":["CVE-2018-11317"],"ecosystem":"Packagist","epss":0.00905,"exploited":false,"fixed_versions":["4.1.4"],"ghsa_id":"GHSA-2cmg-vxvh-8h7h","id":"tcs_01M5KERV86J1HKXPDG2W3HRMWV","modified_at":"2024-02-16T08:23:57.739826Z","published_at":"2022-05-24T16:49:19Z","references":["https://osv.dev/vulnerability/GHSA-2cmg-vxvh-8h7h","https://nvd.nist.gov/vuln/detail/CVE-2018-11317","https://github.com/intelliants/subrion","https://github.com/intelliants/subrion/blob/610b21d3ff185bd287d55fe016d4266abf04a3bf/includes/classes/ia.admin.sitemap.php#L79-L83","https://github.com/intelliants/subrion/releases/tag/v4.1.4"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-2cmg-vxvh-8h7h","url":"https://osv.dev/vulnerability/GHSA-2cmg-vxvh-8h7h"}],"summary":"Subrion CMS XSS"}