{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.9.8"}],"component":"freetakserver-ui","cve_ids":["CVE-2022-25507"],"ecosystem":"PyPI","epss":0.00491,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-gjh6-wvhq-h4qx","id":"tcs_01M5KFHT15T1MV628NK87D8NRV","modified_at":"2026-09-10T03:49:28.315043294Z","published_at":"2022-03-12T00:00:37Z","references":["https://osv.dev/vulnerability/GHSA-gjh6-wvhq-h4qx","https://nvd.nist.gov/vuln/detail/CVE-2022-25507","https://github.com/FreeTAKTeam/UI/issues/28","https://github.com/FreeTAKTeam/UI"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-gjh6-wvhq-h4qx","url":"https://osv.dev/vulnerability/GHSA-gjh6-wvhq-h4qx"}],"summary":"Cross-site Scripting in FreeTAKServer-UI"}