{"action":"Upgrade dolibarr/dolibarr to 8.0.4 or later.","affected":[{"fixed":"8.0.4","introduced":"0"}],"component":"dolibarr/dolibarr","cve_ids":["CVE-2018-19993"],"ecosystem":"Packagist","epss":0.01417,"exploited":false,"fixed_versions":["8.0.4"],"ghsa_id":"GHSA-2gc5-3h3p-8vpf","id":"tcs_01M5KERYM4HXRPHJEG6GJFDC74","modified_at":"2024-04-24T21:11:37.267087Z","published_at":"2022-05-14T01:42:49Z","references":["https://osv.dev/vulnerability/GHSA-2gc5-3h3p-8vpf","https://nvd.nist.gov/vuln/detail/CVE-2018-19993","https://github.com/Dolibarr/dolibarr/commit/fc3fcc5455d9a610b85723e89e8be43a41ad1378","https://github.com/Dolibarr/dolibarr"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-2gc5-3h3p-8vpf","url":"https://osv.dev/vulnerability/GHSA-2gc5-3h3p-8vpf"}],"summary":"Dolibarr reflected cross-site scripting (XSS) vulnerability"}