{"action":"Upgrade ssddanbrown/bookstack to 22.02.3 or later.","affected":[{"fixed":"22.02.3","introduced":"0"}],"component":"ssddanbrown/bookstack","cve_ids":["CVE-2022-0877"],"ecosystem":"Packagist","epss":0.00782,"exploited":false,"fixed_versions":["22.02.3"],"ghsa_id":"GHSA-5rcc-6cmj-7728","id":"tcs_01M5KEWBPN3W9S469EVVP0JK1G","modified_at":"2023-11-08T04:07:41.697904Z","published_at":"2022-03-09T00:00:44Z","references":["https://osv.dev/vulnerability/GHSA-5rcc-6cmj-7728","https://nvd.nist.gov/vuln/detail/CVE-2022-0877","https://github.com/bookstackapp/bookstack/commit/856fca8289b7370cafa033ea21c408e7d4303fd6","https://github.com/bookstackapp/bookstack","https://huntr.dev/bounties/b04df4e3-ae5a-4dc6-81ec-496248b15f3c"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-5rcc-6cmj-7728","url":"https://osv.dev/vulnerability/GHSA-5rcc-6cmj-7728"}],"summary":"Cross-site Scripting in BookStack"}