{"action":"Upgrade stimulsoft-dashboards-js to 2024.1.2 or later.","affected":[{"fixed":"2024.1.2","introduced":"0"}],"component":"stimulsoft-dashboards-js","cve_ids":["CVE-2024-24396"],"ecosystem":"npm","epss":0.00829,"exploited":false,"fixed_versions":["2024.1.2"],"ghsa_id":"GHSA-9m6m-c64r-w4f4","id":"tcs_01M5KFG6MNFV5AGJYYFMK31XM6","modified_at":"2024-02-14T21:30:45Z","published_at":"2024-02-05T21:30:31Z","references":["https://osv.dev/vulnerability/GHSA-9m6m-c64r-w4f4","https://nvd.nist.gov/vuln/detail/CVE-2024-24396","https://cloud-trustit.spp.at/s/Pi78FFazHamJQ5R","https://cves.at/posts/cve-2024-24396/writeup","https://github.com/stimulsoft/Dashboards.JS","http://stimulsoft.com"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-9m6m-c64r-w4f4","url":"https://osv.dev/vulnerability/GHSA-9m6m-c64r-w4f4"}],"summary":"Stimulsoft Dashboard.JS Cross Site Scripting vulnerability"}