{"action":"Upgrade pressbooks/pressbooks to 5.18.0 or later.","affected":[{"fixed":"5.18.0","introduced":"0"}],"component":"pressbooks/pressbooks","cve_ids":["CVE-2021-3271"],"ecosystem":"Packagist","epss":0.00943,"exploited":false,"fixed_versions":["5.18.0"],"ghsa_id":"GHSA-9652-78hp-w58c","id":"tcs_01M5KEZPX2DAB47P47ZV3WPX0M","modified_at":"2024-02-17T05:31:34.822481Z","published_at":"2021-03-29T20:07:39Z","references":["https://osv.dev/vulnerability/GHSA-9652-78hp-w58c","https://nvd.nist.gov/vuln/detail/CVE-2021-3271","https://github.com/pressbooks/pressbooks/pull/2072","https://github.com/pressbooks/pressbooks/commit/941a8c5eaeacea5eb211b54ee55bc0348139cbd8","https://github.com/pressbooks/pressbooks","https://www.gosecure.net/blog/2021/02/16/cve-2021-3271-pressbooks-stored-cross-site-scripting-proof-of-concept"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-9652-78hp-w58c","url":"https://osv.dev/vulnerability/GHSA-9652-78hp-w58c"}],"summary":"Stored cross-site scripting in PressBooks"}