{"action":"Upgrade admidio/admidio to 4.3.12 or later.","affected":[{"fixed":"4.3.12","introduced":"0"}],"component":"admidio/admidio","cve_ids":["CVE-2024-47836"],"ecosystem":"Packagist","epss":0.00511,"exploited":false,"fixed_versions":["4.3.12"],"ghsa_id":"GHSA-7c4c-749j-pfp2","id":"tcs_01M5KEXXP24FY88GJKCTS9M8C2","modified_at":"2024-10-16T22:26:07.747718Z","published_at":"2024-10-16T19:50:40Z","references":["https://osv.dev/vulnerability/GHSA-7c4c-749j-pfp2","https://github.com/Admidio/admidio/security/advisories/GHSA-7c4c-749j-pfp2","https://nvd.nist.gov/vuln/detail/CVE-2024-47836","https://github.com/Admidio/admidio/commit/176f60de6a38dde2b8e848b97647194c12cf5a6c","https://github.com/Admidio/admidio"],"severity":{"label":"low","score":3.5},"sources":[{"source":"osv","source_id":"GHSA-7c4c-749j-pfp2","url":"https://osv.dev/vulnerability/GHSA-7c4c-749j-pfp2"}],"summary":"Admidio Vulnerable to HTML Injection In The Messages Section"}