{"action":"Upgrade craftcms/cms to 2.6.2974 or later.","affected":[{"fixed":"2.6.2974","introduced":"0"}],"component":"craftcms/cms","cve_ids":["CVE-2017-8052"],"ecosystem":"Packagist","epss":0.00835,"exploited":false,"fixed_versions":["2.6.2974"],"ghsa_id":"GHSA-xv5f-2997-qhrq","id":"tcs_01M5KFBB0XW8C0J8DXRH9X76WE","modified_at":"2024-02-16T08:18:01.597146Z","published_at":"2022-05-17T02:48:13Z","references":["https://osv.dev/vulnerability/GHSA-xv5f-2997-qhrq","https://nvd.nist.gov/vuln/detail/CVE-2017-8052","https://github.com/craftcms/cms/commit/f7e57018ff487d1ebbe375f6cb1852f4d79767ff","https://github.com/craftcms/cms","https://github.com/craftcms/cms/blob/2.6.2974/CHANGELOG.md#security","https://twitter.com/CraftCMS/status/855535309878112256"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-xv5f-2997-qhrq","url":"https://osv.dev/vulnerability/GHSA-xv5f-2997-qhrq"}],"summary":"Craft CMS XSS Vulnerability"}