{"action":"Upgrade microweber/microweber to 2.0.16 or later.","affected":[{"fixed":"2.0.16","introduced":"0"}],"component":"microweber/microweber","cve_ids":["CVE-2024-40101"],"ecosystem":"Packagist","epss":0.00903,"exploited":false,"fixed_versions":["2.0.16"],"ghsa_id":"GHSA-m99v-mmg2-66vf","id":"tcs_01M5KF5D17GPTK6J42N9JF1C92","modified_at":"2025-03-25T15:51:56.525208Z","published_at":"2024-08-06T15:30:54Z","references":["https://osv.dev/vulnerability/GHSA-m99v-mmg2-66vf","https://nvd.nist.gov/vuln/detail/CVE-2024-40101","https://github.com/microweber/microweber/commit/0dede6886c6df3d1f31c4f4e3ba1ab4a336fbf79","https://github.com/microweber/microweber","https://seclists.org/fulldisclosure/2024/Aug/1","http://microweber.com","http://seclists.org/fulldisclosure/2024/Aug/1"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-m99v-mmg2-66vf","url":"https://osv.dev/vulnerability/GHSA-m99v-mmg2-66vf"}],"summary":"Microweber Reflected Cross-site scripting (XSS) vulnerability"}