{"action":"Upgrade feehi/cms to 2.0.8.1 or later.","affected":[{"fixed":"2.0.8.1","introduced":"0"}],"component":"feehi/cms","cve_ids":["CVE-2020-21146"],"ecosystem":"Packagist","epss":0.00766,"exploited":false,"fixed_versions":["2.0.8.1"],"ghsa_id":"GHSA-v762-47vh-j7q3","id":"tcs_01M5KF8XEV8YZ8GAB3XJXX6QPK","modified_at":"2024-02-16T08:23:30.283843Z","published_at":"2022-05-24T17:40:05Z","references":["https://osv.dev/vulnerability/GHSA-v762-47vh-j7q3","https://nvd.nist.gov/vuln/detail/CVE-2020-21146","https://github.com/liufee/cms/issues/43","https://github.com/liufee/cms/commit/e92f6877d96e53498101d0664174956e94223d6e","https://github.com/liufee/cms"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-v762-47vh-j7q3","url":"https://osv.dev/vulnerability/GHSA-v762-47vh-j7q3"}],"summary":"Feehi CMS vulnerable to Cross-site Scripting in Username Field"}