{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.1"}],"component":"uvdesk/community-skeleton","cve_ids":["CVE-2023-0325"],"ecosystem":"Packagist","epss":0.00687,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fwhv-9phj-wrj5","id":"tcs_01M5KF23XRPT0CRKREH2VKR1SB","modified_at":"2025-02-13T19:13:34.582604Z","published_at":"2023-04-05T00:30:39Z","references":["https://osv.dev/vulnerability/GHSA-fwhv-9phj-wrj5","https://nvd.nist.gov/vuln/detail/CVE-2023-0325","https://fluidattacks.com/advisories/labrinth","https://github.com/uvdesk/community-skeleton"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-fwhv-9phj-wrj5","url":"https://osv.dev/vulnerability/GHSA-fwhv-9phj-wrj5"}],"summary":"Uvdesk vulnerable to stored cross-site scripting (XSS)"}