{"action":"Upgrade munkireport/managedinstalls to 2.6 or later.","affected":[{"fixed":"2.6","introduced":"0"}],"component":"munkireport/managedinstalls","cve_ids":["CVE-2020-15883"],"ecosystem":"Packagist","epss":0.01161,"exploited":false,"fixed_versions":["2.6"],"ghsa_id":"GHSA-79xr-v794-wq35","id":"tcs_01M5KEXX67Z84Q0GQYH35S4B1T","modified_at":"2025-11-20T10:33:05.051920Z","published_at":"2022-05-24T17:24:15Z","references":["https://osv.dev/vulnerability/GHSA-79xr-v794-wq35","https://nvd.nist.gov/vuln/detail/CVE-2020-15883","https://github.com/munkireport/managedinstalls/commit/708f6a2abc4b80a3751bcc9cf896f80d84250c55","https://github.com/munkireport/managedinstalls","https://github.com/munkireport/managedinstalls/releases/tag/v2.6","https://github.com/munkireport/munkireport-php","https://github.com/munkireport/munkireport-php/releases/tag/v5.6.3","https://github.com/munkireport/munkireport-php/wiki/20200722-Reflected-XSS-In-Managedinstalls-Module"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-79xr-v794-wq35","url":"https://osv.dev/vulnerability/GHSA-79xr-v794-wq35"}],"summary":"MunkiReport Managed Installs module Reflected Cross-Site Scripting (XSS) vulnerability"}