{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.2.1"}],"component":"intelliants/subrion","cve_ids":["CVE-2018-16629"],"ecosystem":"Packagist","epss":0.0056,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mxv3-qcmf-r6wj","id":"tcs_01M5KF5YTKVRV2WXSES9BV9CQJ","modified_at":"2024-02-16T08:20:43.255161Z","published_at":"2022-05-14T01:31:22Z","references":["https://osv.dev/vulnerability/GHSA-mxv3-qcmf-r6wj","https://nvd.nist.gov/vuln/detail/CVE-2018-16629","https://github.com/intelliants/subrion/issues/777","https://github.com/intelliants/subrion/commit/fbc29ddb29e9c9732695e25ad2c22e038eed6385","https://github.com/intelliants/subrion","https://github.com/security-breachlock/CVE-2018-16629/blob/master/subrion_cms.pdf"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-mxv3-qcmf-r6wj","url":"https://osv.dev/vulnerability/GHSA-mxv3-qcmf-r6wj"}],"summary":"Subrion CMS XSS"}