{"action":"No fix published. Pin and monitor.","affected":[],"component":"web-feet/coastercms","cve_ids":["CVE-2018-17876"],"ecosystem":"Packagist","epss":0.00998,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-77cq-wgpf-g449","id":"tcs_01M5KEXSMH2AW9YAKNPTH6FJD2","modified_at":"2024-04-23T23:26:47.725157Z","published_at":"2022-05-14T01:58:19Z","references":["https://osv.dev/vulnerability/GHSA-77cq-wgpf-g449","https://nvd.nist.gov/vuln/detail/CVE-2018-17876","https://github.com/CoasterCms/coastercms","http://packetstormsecurity.com/files/149647/Coaster-CMS-5.5.0-Cross-Site-Scripting.html"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-77cq-wgpf-g449","url":"https://osv.dev/vulnerability/GHSA-77cq-wgpf-g449"}],"summary":"Coaster CMS Stored Cross-site Scripting vulnerability"}