{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.0.25"}],"component":"craftcms/cms","cve_ids":["CVE-2018-20418"],"ecosystem":"Packagist","epss":0.03702,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-72pf-cvwq-vgqg","id":"tcs_01M5KEXK84WVTEK980N1EQTYK6","modified_at":"2024-04-25T22:56:48.419091Z","published_at":"2022-05-14T01:20:01Z","references":["https://osv.dev/vulnerability/GHSA-72pf-cvwq-vgqg","https://nvd.nist.gov/vuln/detail/CVE-2018-20418","https://github.com/craftcms/cms","https://github.com/rdincel1/Craft-CMS-3.0.25---Cross-Site-Scripting","https://web.archive.org/web/20201208014852/https://www.raifberkaydincel.com/craft-cms-3-0-25-cross-site-scripting-vulnerability.html","https://www.exploit-db.com/exploits/46054"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-72pf-cvwq-vgqg","url":"https://osv.dev/vulnerability/GHSA-72pf-cvwq-vgqg"}],"summary":"Craft CMS Cross-site Scripting (XSS) Vulnerability"}