{"action":"Upgrade francoisjacquet/rosariosis to 6.8 or later.","affected":[{"fixed":"6.8","introduced":"0"}],"component":"francoisjacquet/rosariosis","cve_ids":["CVE-2020-15721"],"ecosystem":"Packagist","epss":0.01467,"exploited":false,"fixed_versions":["6.8"],"ghsa_id":"GHSA-6vc5-v7hw-h5h2","id":"tcs_01M5KEXC07PSM25WCSGQ4NE5J7","modified_at":"2023-11-08T04:02:37.907310Z","published_at":"2022-02-10T22:26:10Z","references":["https://osv.dev/vulnerability/GHSA-6vc5-v7hw-h5h2","https://nvd.nist.gov/vuln/detail/CVE-2020-15721","https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md","https://gitlab.com/francoisjacquet/rosariosis/-/commit/c4a694860b50c4aa5c67d6568f7d0613fef1a30d","https://gitlab.com/francoisjacquet/rosariosis/-/issues/291"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-6vc5-v7hw-h5h2","url":"https://osv.dev/vulnerability/GHSA-6vc5-v7hw-h5h2"}],"summary":"Cross-site Scripting in RosarioSIS"}