{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.7.0.2"}],"component":"getkirby/starterkit","cve_ids":["CVE-2022-35174"],"ecosystem":"Packagist","epss":0.00713,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4m2g-668v-jwjx","id":"tcs_01M5KEV3NMD4QSQ6K5210V1VRA","modified_at":"2024-02-22T05:31:23.327916Z","published_at":"2022-08-19T00:00:20Z","references":["https://osv.dev/vulnerability/GHSA-4m2g-668v-jwjx","https://nvd.nist.gov/vuln/detail/CVE-2022-35174","https://github.com/getkirby/starterkit","https://owasp.org/www-community/attacks/xss","https://www.youtube.com/watch?v=0lngc_zPTSg"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-4m2g-668v-jwjx","url":"https://osv.dev/vulnerability/GHSA-4m2g-668v-jwjx"}],"summary":"Cross site scripting in getkirby/starterkit"}