{"action":"Upgrade qcubed/qcubed to 3.2 or later.","affected":[{"fixed":"3.2","introduced":"0"}],"component":"qcubed/qcubed","cve_ids":["CVE-2020-24912"],"ecosystem":"Packagist","epss":0.0634,"exploited":false,"fixed_versions":["3.2"],"ghsa_id":"GHSA-xj4v-gp4q-h6qq","id":"tcs_01M5KFB3WA1A1AYGH4A4MBTW1K","modified_at":"2024-04-24T18:28:59.061643Z","published_at":"2022-05-24T17:43:36Z","references":["https://osv.dev/vulnerability/GHSA-xj4v-gp4q-h6qq","https://nvd.nist.gov/vuln/detail/CVE-2020-24912","https://github.com/qcubed/qcubed/pull/1320/files","https://github.com/qcubed/qcubed","https://tech.feedyourhead.at/content/QCubed-Cross-Site-Scripting-CVE-2020-24912","https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories/ait-sa-20210215-03","http://qcubed.com","http://seclists.org/fulldisclosure/2021/Mar/30"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-xj4v-gp4q-h6qq","url":"https://osv.dev/vulnerability/GHSA-xj4v-gp4q-h6qq"}],"summary":"qcubed reflected cross-site scripting (XSS) vulnerability"}