{"action":"Upgrade devcode-it/openstamanager to 2.9.8 or later.","affected":[{"fixed":"2.9.8","introduced":"0"}],"component":"devcode-it/openstamanager","cve_ids":["CVE-2026-24415"],"ecosystem":"Packagist","epss":0.00284,"exploited":false,"fixed_versions":["2.9.8"],"ghsa_id":"GHSA-jfgp-g7x7-j25j","id":"tcs_01M5KF4GMEP3EX2XK56CM2969E","modified_at":"2026-03-04T15:26:22.987365Z","published_at":"2026-03-03T17:39:00Z","references":["https://osv.dev/vulnerability/GHSA-jfgp-g7x7-j25j","https://github.com/devcode-it/openstamanager/security/advisories/GHSA-jfgp-g7x7-j25j","https://nvd.nist.gov/vuln/detail/CVE-2026-24415","https://github.com/devcode-it/openstamanager"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-jfgp-g7x7-j25j","url":"https://osv.dev/vulnerability/GHSA-jfgp-g7x7-j25j"},{"source":"nvd","source_id":"CVE-2026-24415","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24415"}],"summary":"OpenSTAManager Affected by XSS in modifica_iva.php via righe parameter"}