{"action":"Upgrade admidio/admidio to 4.2.13 or later.","affected":[{"fixed":"4.2.13","introduced":"0"}],"component":"admidio/admidio","cve_ids":["CVE-2023-47380"],"ecosystem":"Packagist","epss":0.007,"exploited":false,"fixed_versions":["4.2.13"],"ghsa_id":"GHSA-vm4p-gh82-xq96","id":"tcs_01M5KF98KNK7HXX1YJSV0TE2XJ","modified_at":"2024-02-20T05:32:23.026558Z","published_at":"2023-11-22T15:31:29Z","references":["https://osv.dev/vulnerability/GHSA-vm4p-gh82-xq96","https://nvd.nist.gov/vuln/detail/CVE-2023-47380","https://github.com/Admidio/admidio","https://github.com/Admidio/admidio/releases/tag/v4.2.13","https://www.admidio.org/intern/adm_program/modules/announcements/announcements.php?ann_uuid=714ead2b-1718-4251-a9a3-f1b0df12d60e&headline=Blog","https://www.getastra.com/blog/security-audit/reflected-xss-vulnerability-in-admidio"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-vm4p-gh82-xq96","url":"https://osv.dev/vulnerability/GHSA-vm4p-gh82-xq96"}],"summary":"Cross-site Scripting in Admidio"}