{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.2.1"}],"component":"intelliants/subrion","cve_ids":["CVE-2018-14835"],"ecosystem":"Packagist","epss":0.00733,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-c8mg-wp7h-f2pf","id":"tcs_01M5KF0RXVB6SZGHNKE8XBMNX1","modified_at":"2024-02-16T08:05:26.933574Z","published_at":"2022-05-14T02:57:59Z","references":["https://osv.dev/vulnerability/GHSA-c8mg-wp7h-f2pf","https://nvd.nist.gov/vuln/detail/CVE-2018-14835","https://github.com/intelliants/subrion/issues/760","https://github.com/intelliants/subrion/pull/763","https://github.com/intelliants/subrion/commit/a33a224c6c9e25144d828f92f6141c719215094b","https://github.com/intelliants/subrion"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-c8mg-wp7h-f2pf","url":"https://osv.dev/vulnerability/GHSA-c8mg-wp7h-f2pf"}],"summary":"Subrion CMS XSS"}