{"action":"Upgrade phpmailer/phpmailer to 5.2.24 or later.","affected":[{"fixed":"5.2.24","introduced":"5.0.0"}],"component":"phpmailer/phpmailer","cve_ids":["CVE-2017-11503"],"ecosystem":"Packagist","epss":0.024,"exploited":false,"fixed_versions":["5.2.24"],"ghsa_id":"GHSA-58mj-pw57-4vm2","id":"tcs_01M5KEVT97MSRQB47TFZZMK8P8","modified_at":"2024-02-16T08:24:37.079984Z","published_at":"2020-03-05T22:09:13Z","references":["https://osv.dev/vulnerability/GHSA-58mj-pw57-4vm2","https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-58mj-pw57-4vm2","https://nvd.nist.gov/vuln/detail/CVE-2017-11503","https://cxsecurity.com/issue/WLB-2017060181","https://github.com/FriendsOfPHP/security-advisories/blob/master/phpmailer/phpmailer/CVE-2017-11503.yaml","https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.24","https://packetstormsecurity.com/files/143138/phpmailer-xss.txt","http://www.securityfocus.com/bid/99293","http://www.securitytracker.com/id/1039026"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-58mj-pw57-4vm2","url":"https://osv.dev/vulnerability/GHSA-58mj-pw57-4vm2"}],"summary":"Cross-site scripting in PHPMailer"}