{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.2.1"}],"component":"intelliants/subrion","cve_ids":["CVE-2022-37059"],"ecosystem":"Packagist","epss":0.00576,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rh4r-9689-6xw4","id":"tcs_01M5KF89MF3HA785ZFFX0DZBQR","modified_at":"2023-11-08T04:10:06.614527Z","published_at":"2022-08-29T20:06:52Z","references":["https://osv.dev/vulnerability/GHSA-rh4r-9689-6xw4","https://nvd.nist.gov/vuln/detail/CVE-2022-37059","https://drive.google.com/file/d/1lmU8zuyzyC9LHFXuXzamnkcLcjcfs0xE/view?usp=sharing","https://github.com/intelliants/subrion"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-rh4r-9689-6xw4","url":"https://osv.dev/vulnerability/GHSA-rh4r-9689-6xw4"}],"summary":"Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel"}