{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.7.1"}],"component":"bolt/bolt","cve_ids":["CVE-2024-7300"],"ecosystem":"Packagist","epss":0.00403,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xhqw-4hcq-fcvr","id":"tcs_01M5KFB3FQ3BEAVHJ81CR0Y9PK","modified_at":"2025-02-13T19:14:04.891848Z","published_at":"2024-07-31T09:30:49Z","references":["https://osv.dev/vulnerability/GHSA-xhqw-4hcq-fcvr","https://nvd.nist.gov/vuln/detail/CVE-2024-7300","https://github.com/bolt/bolt","https://vuldb.com/?ctiid.273168","https://vuldb.com/?id.273168","https://vuldb.com/?submit.380678"],"severity":{"label":"low","score":3.5},"sources":[{"source":"osv","source_id":"GHSA-xhqw-4hcq-fcvr","url":"https://osv.dev/vulnerability/GHSA-xhqw-4hcq-fcvr"}],"summary":"Bolt CMS Cross-site Scripting vulnerability"}