{"action":"Upgrade forkcms/forkcms to 3.2.5 or later.","affected":[{"fixed":"3.2.5","introduced":"0"}],"component":"forkcms/forkcms","cve_ids":["CVE-2012-1209"],"ecosystem":"Packagist","epss":0.01125,"exploited":false,"fixed_versions":["3.2.5"],"ghsa_id":"GHSA-v3fg-x8jw-m974","id":"tcs_01M5KF8QZSMYAVH4RDX94VX22M","modified_at":"2024-01-12T16:56:49.609242Z","published_at":"2022-05-14T03:51:05Z","references":["https://osv.dev/vulnerability/GHSA-v3fg-x8jw-m974","https://nvd.nist.gov/vuln/detail/CVE-2012-1209","https://github.com/forkcms/forkcms/commit/c8ec9c58a6b3c46cdd924532c1de99bcda6072ed","https://github.com/forkcms/forkcms/commit/df75e0797a6540c4d656969a2e7df7689603b2cf","https://exchange.xforce.ibmcloud.com/vulnerabilities/73393","https://github.com/forkcms/forkcms","http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-v3fg-x8jw-m974","url":"https://osv.dev/vulnerability/GHSA-v3fg-x8jw-m974"}],"summary":"Fork CMS XSS via Highlight Parameter"}