{"action":"Upgrade getgrav/grav to 1.3.0 or later.","affected":[{"fixed":"1.3.0","introduced":"0"}],"component":"getgrav/grav","cve_ids":["CVE-2018-5233"],"ecosystem":"Packagist","epss":0.03655,"exploited":false,"fixed_versions":["1.3.0"],"ghsa_id":"GHSA-977g-93f5-rqjx","id":"tcs_01M5KEZSB4ZY3FMWGTSJY0RJA6","modified_at":"2024-04-24T23:11:41.668518Z","published_at":"2022-05-14T03:31:31Z","references":["https://osv.dev/vulnerability/GHSA-977g-93f5-rqjx","https://nvd.nist.gov/vuln/detail/CVE-2018-5233","https://github.com/getgrav/grav","https://sysdream.com/news/lab/2018-03-15-cve-2018-5233-grav-cms-admin-plugin-reflected-cross-site-scripting-xss-vulnerability","http://www.openwall.com/lists/oss-security/2018/03/15/1"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-977g-93f5-rqjx","url":"https://osv.dev/vulnerability/GHSA-977g-93f5-rqjx"}],"summary":"Grav CMS Cross-site scripting (XSS) vulnerability"}