{"action":"Upgrade yetiforce/yetiforce-crm to 6.4.0 or later.","affected":[{"fixed":"6.4.0","introduced":"0"}],"component":"yetiforce/yetiforce-crm","cve_ids":["CVE-2022-2885"],"ecosystem":"Packagist","epss":0.00476,"exploited":false,"fixed_versions":["6.4.0"],"ghsa_id":"GHSA-rjvc-mf7r-ch7r","id":"tcs_01M5KF8C88F3CV299ZZBWX5KGW","modified_at":"2023-11-08T04:09:05.938006Z","published_at":"2022-08-22T00:00:49Z","references":["https://osv.dev/vulnerability/GHSA-rjvc-mf7r-ch7r","https://nvd.nist.gov/vuln/detail/CVE-2022-2885","https://github.com/yetiforcecompany/yetiforcecrm/commit/a9ad9ee089b575855b9e5e202b4990a15811e8d2","https://github.com/yetiforcecompany/yetiforcecrm","https://huntr.dev/bounties/edeed309-be07-4373-b15e-2d1eb415eb89"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-rjvc-mf7r-ch7r","url":"https://osv.dev/vulnerability/GHSA-rjvc-mf7r-ch7r"}],"summary":"Cross site scripting in yetiforce/yetiforce-crm"}