{"action":"Upgrade github.com/gouniverse/cms to 1.4.1 or later.","affected":[{"fixed":"1.4.1","introduced":"0"}],"component":"github.com/gouniverse/cms","cve_ids":["CVE-2024-8572"],"ecosystem":"Go","epss":0.00428,"exploited":false,"fixed_versions":["1.4.1"],"ghsa_id":"GHSA-pv7h-hg6m-82j8","id":"tcs_01M5KFHV7GKWJYR73XEN9548NG","modified_at":"2024-09-16T16:15:43Z","published_at":"2024-09-08T09:30:27Z","references":["https://osv.dev/vulnerability/GHSA-pv7h-hg6m-82j8","https://nvd.nist.gov/vuln/detail/CVE-2024-8572","https://github.com/gouniverse/cms/issues/5","https://github.com/gouniverse/cms/issues/5#issuecomment-2330848731","https://github.com/gouniverse/cms/commit/3e661cdfb4beeb9fe2ad507cdb8104c0b17d072c","https://github.com/gouniverse/cms","https://github.com/gouniverse/cms/releases/tag/v1.4.1","https://pkg.go.dev/vuln/GO-2024-3125","https://vuldb.com/?ctiid.276802","https://vuldb.com/?id.276802","https://vuldb.com/?submit.401896"],"severity":{"label":"low","score":3.5},"sources":[{"source":"osv","source_id":"GHSA-pv7h-hg6m-82j8","url":"https://osv.dev/vulnerability/GHSA-pv7h-hg6m-82j8"}],"summary":"Gouniverse GoLang CMS vulnerable to Cross-site Scripting"}