{"action":"No fix published. Pin and monitor.","affected":[],"component":"bolt/bolt","cve_ids":["CVE-2019-9553"],"ecosystem":"Packagist","epss":0.01751,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2g23-qmmp-fvmr","id":"tcs_01M5KERY70NPCTJV9N7EQSQB73","modified_at":"2024-04-23T23:42:49.384889Z","published_at":"2022-05-24T17:05:27Z","references":["https://osv.dev/vulnerability/GHSA-2g23-qmmp-fvmr","https://nvd.nist.gov/vuln/detail/CVE-2019-9553","https://github.com/bolt/bolt","https://packetstormsecurity.com/files/151943/Bold-CMS-3.6.4-Cross-Site-Scripting.html","https://www.exploit-db.com/exploits/46495"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-2g23-qmmp-fvmr","url":"https://osv.dev/vulnerability/GHSA-2g23-qmmp-fvmr"}],"summary":"Bolt Cross-site Scripting via the slug, teaser or title parameters"}