{"action":"Upgrade dweeves/magmi to 0.7.24 or later.","affected":[{"fixed":"0.7.24","introduced":"0"}],"component":"dweeves/magmi","cve_ids":["CVE-2017-7391"],"ecosystem":"Packagist","epss":0.08279,"exploited":false,"fixed_versions":["0.7.24"],"ghsa_id":"GHSA-r8vh-cm9f-rc29","id":"tcs_01M5KF82ZCTEFWQX4YRG6D8KSQ","modified_at":"2024-02-16T08:04:27.777991Z","published_at":"2022-05-17T02:51:51Z","references":["https://osv.dev/vulnerability/GHSA-r8vh-cm9f-rc29","https://nvd.nist.gov/vuln/detail/CVE-2017-7391","https://github.com/dweeves/magmi-git/issues/522","https://github.com/dweeves/magmi-git/pull/525","https://github.com/dweeves/magmi-git/commit/a9566b141b58bf40a9dd904a74e6efcc225a28a3","https://web.archive.org/web/20210125191718/http://www.securityfocus.com/bid/97311"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-r8vh-cm9f-rc29","url":"https://osv.dev/vulnerability/GHSA-r8vh-cm9f-rc29"}],"summary":"Magmi XSS Vulnerability"}