{"action":"Upgrade intelliants/subrion to 4.2.2 or later.","affected":[{"fixed":"4.2.2","introduced":"0"}],"component":"intelliants/subrion","cve_ids":["CVE-2018-14840"],"ecosystem":"Packagist","epss":0.03666,"exploited":false,"fixed_versions":["4.2.2"],"ghsa_id":"GHSA-vhqr-3gr2-7px9","id":"tcs_01M5KF976V0T5VE5FW7AFM3CWG","modified_at":"2024-02-17T05:36:28.221591Z","published_at":"2022-05-14T02:00:54Z","references":["https://osv.dev/vulnerability/GHSA-vhqr-3gr2-7px9","https://nvd.nist.gov/vuln/detail/CVE-2018-14840","https://github.com/intelliants/subrion/issues/773","https://github.com/intelliants/subrion/commit/b12e287d3814c0f2d0b1892f95fc0190972d2ba5","https://github.com/intelliants/subrion/commit/cb10ac2294cb2c3a6d2159f9a2bb8c58a2a10a47","https://www.exploit-db.com/exploits/45150"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-vhqr-3gr2-7px9","url":"https://osv.dev/vulnerability/GHSA-vhqr-3gr2-7px9"}],"summary":"Subrion CMS Cross-site Scripting"}