{"action":"Upgrade unopim/unopim to 0.1.5 or later.","affected":[{"fixed":"0.1.5","introduced":"0"}],"component":"unopim/unopim","cve_ids":["CVE-2024-52305"],"ecosystem":"Packagist","epss":0.00197,"exploited":false,"fixed_versions":["0.1.5"],"ghsa_id":"GHSA-cgr4-c233-h733","id":"tcs_01M5KF0ZCZ31DFFB9754CD11SM","modified_at":"2024-11-13T19:12:23.684065Z","published_at":"2024-11-13T18:37:15Z","references":["https://osv.dev/vulnerability/GHSA-cgr4-c233-h733","https://github.com/unopim/unopim/security/advisories/GHSA-cgr4-c233-h733","https://nvd.nist.gov/vuln/detail/CVE-2024-52305","https://github.com/unopim/unopim/commit/9a0da7a0892c60f58df2351b5a9498dcb4cb8b7a","https://github.com/unopim/unopim"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-cgr4-c233-h733","url":"https://osv.dev/vulnerability/GHSA-cgr4-c233-h733"}],"summary":"UnoPim Stored XSS : Cookie hijacking through Create User function"}