{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.11.1"}],"component":"villagedefrance/opencart-overclocked","cve_ids":["CVE-2018-1000640"],"ecosystem":"Packagist","epss":0.00864,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cr3q-658v-qv3x","id":"tcs_01M5KF1577D4WNWMGF12EC7S3H","modified_at":"2024-04-25T22:43:36.957391Z","published_at":"2022-05-14T02:19:50Z","references":["https://osv.dev/vulnerability/GHSA-cr3q-658v-qv3x","https://nvd.nist.gov/vuln/detail/CVE-2018-1000640","https://github.com/villagedefrance/OpenCart-Overclocked/issues/190","https://github.com/418sec/OpenCart-Overclocked/pull/1","https://0dd.zone/2018/08/05/OpenCart-Overclocked-Reflected-XSS","https://github.com/villagedefrance/OpenCart-Overclocked"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-cr3q-658v-qv3x","url":"https://osv.dev/vulnerability/GHSA-cr3q-658v-qv3x"}],"summary":"OpenCart-Overclocked Cross-site Scripting Vulnerability"}