{"action":"No fix published. Pin and monitor.","affected":[],"component":"froxlor/froxlor","cve_ids":["CVE-2020-28957"],"ecosystem":"Packagist","epss":0.00595,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cv24-vh45-4hjm","id":"tcs_01M5KF16YP1BTFH0RZF0GQ41XF","modified_at":"2024-04-25T21:43:28.006927Z","published_at":"2022-05-24T19:18:34Z","references":["https://osv.dev/vulnerability/GHSA-cv24-vh45-4hjm","https://nvd.nist.gov/vuln/detail/CVE-2020-28957","https://github.com/Froxlor/Froxlor","https://www.vulnerability-lab.com/get_content.php?id=2241"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-cv24-vh45-4hjm","url":"https://osv.dev/vulnerability/GHSA-cv24-vh45-4hjm"}],"summary":"Foxlor cross-site scripting (XSS) vulnerability"}