{"action":"Upgrade wireui/wireui to 1.19.3 or later.","affected":[{"fixed":"1.19.3","introduced":"0"},{"fixed":"2.1.3","introduced":"2.0.0"}],"component":"wireui/wireui","cve_ids":["CVE-2024-45803"],"ecosystem":"Packagist","epss":0.00416,"exploited":false,"fixed_versions":["1.19.3","2.1.3"],"ghsa_id":"GHSA-rw5h-g8xq-6877","id":"tcs_01M5KF8KVZEGN96BGQQ4HRSBD9","modified_at":"2024-09-17T22:33:53.021208Z","published_at":"2024-09-17T18:33:14Z","references":["https://osv.dev/vulnerability/GHSA-rw5h-g8xq-6877","https://github.com/wireui/wireui/security/advisories/GHSA-rw5h-g8xq-6877","https://nvd.nist.gov/vuln/detail/CVE-2024-45803","https://github.com/wireui/wireui/commit/784c4f110e58eb41d0f2bdecd4655ea417f16e7e","https://github.com/wireui/wireui/commit/a457654912055f4dcc559da04d4e319f76b80fc5","https://github.com/wireui/wireui"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-rw5h-g8xq-6877","url":"https://osv.dev/vulnerability/GHSA-rw5h-g8xq-6877"}],"summary":"Wire UI has a JS XSS Vulnerability on route /wireui/button?label=Content"}