{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"4.0.0","last_affected":"4.0.5"}],"component":"ec-cube/ec-cube","cve_ids":["CVE-2021-20717"],"ecosystem":"Packagist","epss":0.02308,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-c8mx-43cq-993w","id":"tcs_01M5KF0S0VRMP9T8CH7F0RD04R","modified_at":"2024-04-25T20:57:37.089730Z","published_at":"2022-05-24T19:01:56Z","references":["https://osv.dev/vulnerability/GHSA-c8mx-43cq-993w","https://nvd.nist.gov/vuln/detail/CVE-2021-20717","https://github.com/EC-CUBE/ec-cube","https://jvn.jp/en/jp/JVN97554111/index.html","https://www.ec-cube.net/news/detail.php?news_id=383","https://www.ec-cube.net/news/detail.php?news_id=384"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-c8mx-43cq-993w","url":"https://osv.dev/vulnerability/GHSA-c8mx-43cq-993w"}],"summary":"EC-CUBE Cross-site scripting vulnerability"}