{"action":"Upgrade thinkcmf/thinkcmf to 6.0.8 or later.","affected":[{"fixed":"6.0.8","introduced":"0"}],"component":"thinkcmf/thinkcmf","cve_ids":["CVE-2022-40849"],"ecosystem":"Packagist","epss":0.00413,"exploited":false,"fixed_versions":["6.0.8"],"ghsa_id":"GHSA-m9mf-rqx6-2xpc","id":"tcs_01M5KF5DTNTY7TBSF3YPEM7F4D","modified_at":"2024-04-25T21:12:11.157973Z","published_at":"2022-12-01T06:30:25Z","references":["https://osv.dev/vulnerability/GHSA-m9mf-rqx6-2xpc","https://nvd.nist.gov/vuln/detail/CVE-2022-40849","https://github.com/thinkcmf/thinkcmf/issues/737","https://github.com/thinkcmf/thinkcmf/commit/aba1f52bbf6c9515c545e046cec8416cbaefa496","https://github.com/thinkcmf/thinkcmf/commit/b61636134aa57d4693967f35772200c779099740","https://github.com/thinkcmf/thinkcmf"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-m9mf-rqx6-2xpc","url":"https://osv.dev/vulnerability/GHSA-m9mf-rqx6-2xpc"}],"summary":"ThinkCMF Stored Cross-Site Scripting (XSS)"}