{"action":"Upgrade lara-zeus/dynamic-dashboard to 3.0.2 or later.","affected":[{"fixed":"3.0.2","introduced":"3.0.0"}],"component":"lara-zeus/dynamic-dashboard","cve_ids":["CVE-2024-47817"],"ecosystem":"Packagist","epss":0.00395,"exploited":false,"fixed_versions":["3.0.2"],"ghsa_id":"GHSA-c6cw-g7fc-4gwc","id":"tcs_01M5KF0NM8QD5QYM26GKPCGG5A","modified_at":"2024-10-08T14:37:25.754713Z","published_at":"2024-10-07T14:55:30Z","references":["https://osv.dev/vulnerability/GHSA-c6cw-g7fc-4gwc","https://github.com/lara-zeus/dynamic-dashboard/security/advisories/GHSA-c6cw-g7fc-4gwc","https://nvd.nist.gov/vuln/detail/CVE-2024-47817","https://github.com/lara-zeus/artemis/commit/3a3f9dd8a706af569c5581b20dcfeff91a43b9d9","https://github.com/lara-zeus/artemis/commit/4636f58628d20d3e78ea8514406bd7da94997f2c","https://github.com/lara-zeus/dynamic-dashboard/commit/adfb4b1cdfdaa01299631f0e569ce201a7cc545a","https://github.com/lara-zeus/dynamic-dashboard"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-c6cw-g7fc-4gwc","url":"https://osv.dev/vulnerability/GHSA-c6cw-g7fc-4gwc"}],"summary":"Lara-zeus Dynamic Dashboard and Artemis do not validate paragraph widget values which can be used for XSS"}