{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.2.1"}],"component":"intelliants/subrion","cve_ids":["CVE-2018-15563"],"ecosystem":"Packagist","epss":0.00686,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6wc4-v4v5-3m82","id":"tcs_01M5KEXEVSX0G72RK8BKYSP4CV","modified_at":"2024-04-25T22:11:45.454355Z","published_at":"2022-05-14T02:00:53Z","references":["https://osv.dev/vulnerability/GHSA-6wc4-v4v5-3m82","https://nvd.nist.gov/vuln/detail/CVE-2018-15563","https://cxsecurity.com/issue/WLB-2018090261","https://github.com/intelliants/subrion"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-6wc4-v4v5-3m82","url":"https://osv.dev/vulnerability/GHSA-6wc4-v4v5-3m82"}],"summary":"Subrion CMS Stored Cross-site Scripting (XSS)"}