{"action":"Upgrade cakephp/cakephp to 1.1.7.3363 or later.","affected":[{"fixed":"1.1.7.3363","introduced":"1.0.1.2708"}],"component":"cakephp/cakephp","cve_ids":["CVE-2006-4067"],"ecosystem":"Packagist","epss":0.01207,"exploited":false,"fixed_versions":["1.1.7.3363"],"ghsa_id":"GHSA-vc29-mvwv-wpcq","id":"tcs_01M5KF91HSS7YVEC4HCBY6YKYM","modified_at":"2023-11-08T03:56:46.968349Z","published_at":"2022-05-01T07:15:05Z","references":["https://osv.dev/vulnerability/GHSA-vc29-mvwv-wpcq","https://nvd.nist.gov/vuln/detail/CVE-2006-4067","https://exchange.xforce.ibmcloud.com/vulnerabilities/28256","https://github.com/cakephp/cakephp"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-vc29-mvwv-wpcq","url":"https://osv.dev/vulnerability/GHSA-vc29-mvwv-wpcq"}],"summary":"Cross-site scripting (XSS) vulnerability in CakePHP"}