{"action":"Upgrade microweber/microweber to 1.3.3 or later.","affected":[{"fixed":"1.3.3","introduced":"0"}],"component":"microweber/microweber","cve_ids":["CVE-2023-1881"],"ecosystem":"Packagist","epss":0.00493,"exploited":false,"fixed_versions":["1.3.3"],"ghsa_id":"GHSA-hhjm-mpmf-cxg9","id":"tcs_01M5KF3P9MJYVCCCQ88CJRXDTW","modified_at":"2023-11-08T04:11:20.848086Z","published_at":"2023-04-05T18:30:18Z","references":["https://osv.dev/vulnerability/GHSA-hhjm-mpmf-cxg9","https://nvd.nist.gov/vuln/detail/CVE-2023-1881","https://github.com/microweber/microweber/commit/8d039de2d615956f6df8df0bb1045ff3be88f183","https://github.com/microweber/microweber","https://huntr.dev/bounties/d5ebc2bd-8638-41c4-bf72-7c906c601344"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-hhjm-mpmf-cxg9","url":"https://osv.dev/vulnerability/GHSA-hhjm-mpmf-cxg9"}],"summary":"Microweber vulnerable to stored cross-site scripting (XSS) via X-Forwarded-For header"}