{"action":"Upgrade devcode-it/openstamanager to 2.11-beta or later.","affected":[{"fixed":"2.11-beta","introduced":"0"}],"component":"devcode-it/openstamanager","cve_ids":["CVE-2026-44701"],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.11-beta"],"ghsa_id":"GHSA-crx4-7mmq-j74j","id":"tcs_01M5KF16TRVMN1ZYB7HGDR1WVD","modified_at":"2026-08-26T18:26:19.253711Z","published_at":"2026-08-26T18:12:25Z","references":["https://osv.dev/vulnerability/GHSA-crx4-7mmq-j74j","https://github.com/devcode-it/openstamanager/security/advisories/GHSA-crx4-7mmq-j74j","https://github.com/devcode-it/openstamanager/commit/0b88ad1963871abfa5e134004ca0c74c496d8d2f","https://github.com/devcode-it/openstamanager/commit/7c9eafe9ffefcfd61357c81165157090e790c213","https://github.com/devcode-it/openstamanager","https://github.com/devcode-it/openstamanager/releases/tag/v2.11-beta"],"severity":{"label":"low","score":3.5},"sources":[{"source":"osv","source_id":"GHSA-crx4-7mmq-j74j","url":"https://osv.dev/vulnerability/GHSA-crx4-7mmq-j74j"}],"summary":"OpenSTAManager has HTML Injection in modules/utenti/edit.php"}