{"action":"Upgrade francoisjacquet/rosariosis to 6.5.1 or later.","affected":[{"fixed":"6.5.1","introduced":"0"}],"component":"francoisjacquet/rosariosis","cve_ids":["CVE-2020-13278"],"ecosystem":"Packagist","epss":0.0143,"exploited":false,"fixed_versions":["6.5.1"],"ghsa_id":"GHSA-4cx9-7xqc-2jxm","id":"tcs_01M5KETX4JX59E2QZ4CCYDPDB3","modified_at":"2023-11-08T04:02:14.270532Z","published_at":"2021-05-06T18:54:48Z","references":["https://osv.dev/vulnerability/GHSA-4cx9-7xqc-2jxm","https://nvd.nist.gov/vuln/detail/CVE-2020-13278","https://gitlab.com/francoisjacquet/rosariosis/-/commit/9cb4fec5fe177f1d3716708b46d1958eac477ebe","https://gitlab.com/francoisjacquet/rosariosis/-/issues/282","https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13278.json"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-4cx9-7xqc-2jxm","url":"https://osv.dev/vulnerability/GHSA-4cx9-7xqc-2jxm"}],"summary":"Reflected cross-site scripting in francoisjacquet/rosariosis"}