{"action":"Upgrade stimulsoft-dashboards-js to 2024.1.2 or later.","affected":[{"fixed":"2024.1.2","introduced":"0"}],"component":"stimulsoft-dashboards-js","cve_ids":["CVE-2024-24397"],"ecosystem":"npm","epss":0.00759,"exploited":false,"fixed_versions":["2024.1.2"],"ghsa_id":"GHSA-9cgf-pxwq-2cpw","id":"tcs_01M5KFFH6VJ0ZDSNSPHKZ7ZGH5","modified_at":"2024-02-22T18:54:18Z","published_at":"2024-02-05T18:31:37Z","references":["https://osv.dev/vulnerability/GHSA-9cgf-pxwq-2cpw","https://nvd.nist.gov/vuln/detail/CVE-2024-24397","https://cloud-trustit.spp.at/s/Pi78FFazHamJQ5R","https://cves.at/posts/cve-2024-24397/writeup","https://github.com/stimulsoft/Dashboards.JS","http://stimulsoft.com"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-9cgf-pxwq-2cpw","url":"https://osv.dev/vulnerability/GHSA-9cgf-pxwq-2cpw"}],"summary":"Stimulsoft Dashboard.JS Cross Site Scripting vulnerability"}