{"action":"Upgrade yetiforce/yetiforce-crm to 6.4.0 or later.","affected":[{"fixed":"6.4.0","introduced":"0"}],"component":"yetiforce/yetiforce-crm","cve_ids":["CVE-2022-2890"],"ecosystem":"Packagist","epss":0.00893,"exploited":false,"fixed_versions":["6.4.0"],"ghsa_id":"GHSA-jhxh-68jj-68c7","id":"tcs_01M5KF4MC4PDG9ZB0T6M86CXSQ","modified_at":"2023-11-08T04:09:06.241442Z","published_at":"2022-08-23T00:00:16Z","references":["https://osv.dev/vulnerability/GHSA-jhxh-68jj-68c7","https://nvd.nist.gov/vuln/detail/CVE-2022-2890","https://github.com/yetiforcecompany/yetiforcecrm/commit/2c14baaf8dbc7fd82d5c585f2fa0c23528450618","https://github.com/yetiforcecompany/yetiforcecrm","https://huntr.dev/bounties/5d228a33-eda3-4cff-91da-7bc43e6636da"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-jhxh-68jj-68c7","url":"https://osv.dev/vulnerability/GHSA-jhxh-68jj-68c7"}],"summary":"Cross site scripting in yetiforce/yetiforce-crm"}