{"action":"Upgrade yetiforce/yetiforce-crm to 6.4.0 or later.","affected":[{"fixed":"6.4.0","introduced":"0"}],"component":"yetiforce/yetiforce-crm","cve_ids":["CVE-2022-1340"],"ecosystem":"Packagist","epss":0.005,"exploited":false,"fixed_versions":["6.4.0"],"ghsa_id":"GHSA-w83m-rghh-frxj","id":"tcs_01M5KF9WWBDZC0KG18S3JEF8XT","modified_at":"2023-11-08T04:07:47.449668Z","published_at":"2022-08-23T00:00:19Z","references":["https://osv.dev/vulnerability/GHSA-w83m-rghh-frxj","https://nvd.nist.gov/vuln/detail/CVE-2022-1340","https://github.com/yetiforcecompany/yetiforcecrm/commit/2c14baaf8dbc7fd82d5c585f2fa0c23528450618","https://github.com/yetiforcecompany/yetiforcecrm","https://huntr.dev/bounties/4746f149-fc55-48a1-a7ab-fd7c7412c05a"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-w83m-rghh-frxj","url":"https://osv.dev/vulnerability/GHSA-w83m-rghh-frxj"}],"summary":"Cross site scripting in yetiforce/yetiforce-crm"}