{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"11.5.1"}],"component":"francoisjacquet/rosariosis","cve_ids":["CVE-2024-3138"],"ecosystem":"Packagist","epss":0.0047,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-r32g-w9cv-9fgc","id":"tcs_01M5KF7S5K16QW2BSDYC7ZD308","modified_at":"2026-09-10T03:50:11.422434194Z","published_at":"2024-04-02T00:30:46Z","references":["https://osv.dev/vulnerability/GHSA-r32g-w9cv-9fgc","https://nvd.nist.gov/vuln/detail/CVE-2024-3138","https://github.com/francoisjacquet/rosariosis","https://powerful-bulb-c36.notion.site/Stored-xss-via-malicious-PDF-upload-98fb1ea6b9bf4ddfaf04d61b2c05410a","https://vuldb.com/?ctiid.258911","https://vuldb.com/?id.258911","https://vuldb.com/?submit.307450"],"severity":{"label":"low","score":3.5},"sources":[{"source":"osv","source_id":"GHSA-r32g-w9cv-9fgc","url":"https://osv.dev/vulnerability/GHSA-r32g-w9cv-9fgc"}],"summary":"RosarioSIS cross site scripting vulnerability"}