{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"1.7.8","last_affected":"2.8.4"}],"component":"codiad/codiad","cve_ids":["CVE-2020-14042"],"ecosystem":"Packagist","epss":0.01172,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-g2x4-256v-5pvx","id":"tcs_01M5KF27134PAM0HAJXZV68RBP","modified_at":"2024-04-25T22:43:37.126806Z","published_at":"2022-05-24T17:26:28Z","references":["https://osv.dev/vulnerability/GHSA-g2x4-256v-5pvx","https://nvd.nist.gov/vuln/detail/CVE-2020-14042","https://github.com/Codiad/Codiad/issues/1122","https://github.com/Codiad/Codiad/issues/1132","https://github.com/Codiad/Codiad","https://web.archive.org/web/20220828225621/https://advisory.checkmarx.net/advisory/CX-2020-4278"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-g2x4-256v-5pvx","url":"https://osv.dev/vulnerability/GHSA-g2x4-256v-5pvx"}],"summary":"Codiad Cross-site Scripting Vulnerability"}