{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.6.4"}],"component":"bbpress/bbpress","cve_ids":["CVE-2020-13487"],"ecosystem":"Packagist","epss":0.01593,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-p9xp-xghp-gqvp","id":"tcs_01M5KF698F46APWR8VAREY8KP6","modified_at":"2024-04-25T21:57:36.461742Z","published_at":"2022-05-24T17:18:42Z","references":["https://osv.dev/vulnerability/GHSA-p9xp-xghp-gqvp","https://nvd.nist.gov/vuln/detail/CVE-2020-13487","https://bbpress.org","https://codex.bbpress.org/releases","https://github.com/bbpress/bbPress","https://wordpress.org/plugins/bbpress/#developers","https://www.youtube.com/watch?v=3rXP8CGTe08"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-p9xp-xghp-gqvp","url":"https://osv.dev/vulnerability/GHSA-p9xp-xghp-gqvp"}],"summary":"bbPress stored Cross-Site Scripting (XSS) vulnerability in the Forum creation section"}