{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.7.45"}],"component":"getgrav/grav","cve_ids":["CVE-2024-35498"],"ecosystem":"Packagist","epss":0.00388,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-m78c-qx99-mvw9","id":"tcs_01M5KF58YYBTHERQ7VP0AGTM2K","modified_at":"2025-01-07T18:47:43.519679Z","published_at":"2025-01-06T21:30:51Z","references":["https://osv.dev/vulnerability/GHSA-m78c-qx99-mvw9","https://nvd.nist.gov/vuln/detail/CVE-2024-35498","https://github.com/getgrav/grav","https://github.com/r4vanan/Stored-xss-Grav-v1.7.45","https://r4vanan.medium.com/a-quick-dive-into-xss-vulnerability-in-grav-cms-v1-7-45-cve-2024-35498-fc236b7d74a0"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-m78c-qx99-mvw9","url":"https://osv.dev/vulnerability/GHSA-m78c-qx99-mvw9"}],"summary":"Grav Cross-site Scripting vulnerability"}