{"action":"Upgrade getgrav/grav to 1.7.31 or later.","affected":[{"fixed":"1.7.31","introduced":"0"}],"component":"getgrav/grav","cve_ids":["CVE-2022-0970"],"ecosystem":"Packagist","epss":0.01799,"exploited":false,"fixed_versions":["1.7.31"],"ghsa_id":"GHSA-r6hh-5g3q-wwgc","id":"tcs_01M5KF7ZH6ZR92R6QCXNW1BCHR","modified_at":"2023-11-08T04:07:44.348766Z","published_at":"2022-03-16T00:00:45Z","references":["https://osv.dev/vulnerability/GHSA-r6hh-5g3q-wwgc","https://nvd.nist.gov/vuln/detail/CVE-2022-0970","https://github.com/getgrav/grav/commit/f19297d5f70476e7bedae9f2acef6b43615538b8","https://github.com/getgrav/grav","https://huntr.dev/bounties/dd436c44-cbf4-48ac-8817-3a24872534ec"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-r6hh-5g3q-wwgc","url":"https://osv.dev/vulnerability/GHSA-r6hh-5g3q-wwgc"}],"summary":"Stored Cross-site Scripting in grav"}