{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"6.3.0"}],"component":"yetiforce/yetiforce-crm","cve_ids":["CVE-2021-4107"],"ecosystem":"Packagist","epss":0.00808,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rp42-c45j-g46x","id":"tcs_01M5KF8E26RPZW09WZDXB17ZSR","modified_at":"2023-11-08T04:06:50.361124Z","published_at":"2021-12-16T14:12:23Z","references":["https://osv.dev/vulnerability/GHSA-rp42-c45j-g46x","https://nvd.nist.gov/vuln/detail/CVE-2021-4107","https://github.com/yetiforcecompany/yetiforcecrm/commit/a062d3d5fecb000db207a2ad8a446db97ad96b89","https://github.com/yetiforcecompany/yetiforcecrm","https://huntr.dev/bounties/1d124520-cf29-4539-a0f3-6d041af7b5a8"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-rp42-c45j-g46x","url":"https://osv.dev/vulnerability/GHSA-rp42-c45j-g46x"}],"summary":"yetiforcecrm is vulnerable to Cross-site Scripting"}