{"action":"Upgrade redaxo/source to 5.18.2 or later.","affected":[{"fixed":"5.18.2","introduced":"5.12.0-beta1"}],"component":"redaxo/source","cve_ids":["CVE-2024-13209"],"ecosystem":"Packagist","epss":0.004,"exploited":false,"fixed_versions":["5.18.2"],"ghsa_id":"GHSA-7wj8-856p-qc9m","id":"tcs_01M5KEYFTDYAMTQRQY5VD4XMNJ","modified_at":"2025-02-10T19:12:10.087108Z","published_at":"2025-02-10T18:55:06Z","references":["https://osv.dev/vulnerability/GHSA-7wj8-856p-qc9m","https://github.com/redaxo/redaxo/security/advisories/GHSA-7wj8-856p-qc9m","https://nvd.nist.gov/vuln/detail/CVE-2024-13209","https://github.com/redaxo/redaxo/commit/74d7391571a29a455a0c477973bc25d25710e424","https://geochen.medium.com/redaxo-cms-5-18-1-cross-site-scripting-7c9a872c72f6","https://github.com/redaxo/redaxo"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-7wj8-856p-qc9m","url":"https://osv.dev/vulnerability/GHSA-7wj8-856p-qc9m"}],"summary":"Stored XSS in REDAXO"}