{"action":"Upgrade nystudio107/craft-seomatic to 3.3.0 or later.","affected":[{"fixed":"3.3.0","introduced":"0"}],"component":"nystudio107/craft-seomatic","cve_ids":["CVE-2020-9757"],"ecosystem":"Packagist","epss":0.72821,"exploited":false,"fixed_versions":["3.3.0"],"ghsa_id":"GHSA-6q4j-8pjm-5mgc","id":"tcs_01M5KEX96FME3FR0CW53726PDF","modified_at":"2024-02-16T08:16:54.048866Z","published_at":"2022-05-24T17:10:09Z","references":["https://osv.dev/vulnerability/GHSA-6q4j-8pjm-5mgc","https://nvd.nist.gov/vuln/detail/CVE-2020-9757","https://github.com/nystudio107/craft-seomatic/commit/65ab659cb6c914c7ad671af1e417c0da2431f79b","https://github.com/nystudio107/craft-seomatic/commit/a1c2cad7e126132d2442ec8ec8e9ab43df02cc0f","https://github.com/giany/CVE/blob/master/CVE-2020-9757.txt","https://github.com/nystudio107/craft-seomatic","https://github.com/nystudio107/craft-seomatic/blob/v3/CHANGELOG.md"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-6q4j-8pjm-5mgc","url":"https://osv.dev/vulnerability/GHSA-6q4j-8pjm-5mgc"}],"summary":"SEOmatic for CraftCMS allows Server-Side Template Injection"}