{"action":"Upgrade nukeviet/nukeviet to 4.4.01 or later.","affected":[{"fixed":"4.4.01","introduced":"4.4.0"}],"component":"nukeviet/nukeviet","cve_ids":["CVE-2020-22765"],"ecosystem":"Packagist","epss":0.00616,"exploited":false,"fixed_versions":["4.4.01"],"ghsa_id":"GHSA-6j4j-22qg-9ffm","id":"tcs_01M5KEX4NT542QY9XRWPYCC8FV","modified_at":"2024-04-24T20:13:32.953200Z","published_at":"2022-05-24T19:09:25Z","references":["https://osv.dev/vulnerability/GHSA-6j4j-22qg-9ffm","https://nvd.nist.gov/vuln/detail/CVE-2020-22765","https://github.com/nukeviet/nukeviet","https://nukeviet.vn/vi/news/Tin-tuc/nukeviet-cam-on-le-thanh-trung-da-phat-hien-loi-an-ninh-nukeviet-631.html"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-6j4j-22qg-9ffm","url":"https://osv.dev/vulnerability/GHSA-6j4j-22qg-9ffm"}],"summary":"NukeViet Cross-site Scripting via the editor in the News module"}