{"action":"Upgrade geshi/geshi to 1.0.8.11 or later.","affected":[{"fixed":"1.0.8.11","introduced":"0"}],"component":"geshi/geshi","cve_ids":["CVE-2012-3522"],"ecosystem":"Packagist","epss":0.0124,"exploited":false,"fixed_versions":["1.0.8.11"],"ghsa_id":"GHSA-f3f3-5q5j-6v47","id":"tcs_01M5KF1CTZX5NRFTH9N32FT0Y4","modified_at":"2025-04-14T16:42:07.184461Z","published_at":"2022-05-17T04:42:16Z","references":["https://osv.dev/vulnerability/GHSA-f3f3-5q5j-6v47","https://nvd.nist.gov/vuln/detail/CVE-2012-3522","https://github.com/GeSHi/geshi-1.0","https://lists.fedorahosted.org/archives/list/package-announce@lists.fedoraproject.org/message/AE33KOZ42XXG6DSH5SNGOTC3NS7FWZ2I","https://lists.fedorahosted.org/archives/list/package-announce@lists.fedoraproject.org/message/H2R65LEAIDK6I53IYGZWDCRETBYKNUKF","https://lists.fedorahosted.org/archives/list/package-announce@lists.fedoraproject.org/message/JA5TA3T7AJXWM4QMI62LMGW62WZUULGB","http://sourceforge.net/p/geshi/code/2508","http://www.openwall.com/lists/oss-security/2012/08/21/11"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-f3f3-5q5j-6v47","url":"https://osv.dev/vulnerability/GHSA-f3f3-5q5j-6v47"}],"summary":"GeSHi vulnerable to Cross-site Scripting"}