{"action":"Upgrade getgrav/grav to 1.7.28 or later.","affected":[{"fixed":"1.7.28","introduced":"0"}],"component":"getgrav/grav","cve_ids":["CVE-2022-0268"],"ecosystem":"Packagist","epss":0.01416,"exploited":false,"fixed_versions":["1.7.28"],"ghsa_id":"GHSA-735v-wx75-xmmm","id":"tcs_01M5KEXM72J7B4DJGFKM85KZCW","modified_at":"2023-11-08T04:07:31.253786Z","published_at":"2022-01-27T18:27:56Z","references":["https://osv.dev/vulnerability/GHSA-735v-wx75-xmmm","https://nvd.nist.gov/vuln/detail/CVE-2022-0268","https://github.com/getgrav/grav/commit/6f2fa9311afb9ecd34030dec2aff7b39e9e7e735","https://github.com/getgrav/grav","https://huntr.dev/bounties/67085545-331e-4469-90f3-a1a46a078d39"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-735v-wx75-xmmm","url":"https://osv.dev/vulnerability/GHSA-735v-wx75-xmmm"}],"summary":"Cross-site Scripting in grav"}