{"action":"Upgrade ghost to 5.76.0 or later.","affected":[{"fixed":"5.76.0","introduced":"0"}],"component":"ghost","cve_ids":["CVE-2024-23725"],"ecosystem":"npm","epss":0.00436,"exploited":false,"fixed_versions":["5.76.0"],"ghsa_id":"GHSA-fh38-9fgr-454w","id":"tcs_01M5KFNJ3S8MVK6GACMZP3RQH2","modified_at":"2024-01-30T08:11:39.357026Z","published_at":"2024-01-21T06:30:22Z","references":["https://osv.dev/vulnerability/GHSA-fh38-9fgr-454w","https://nvd.nist.gov/vuln/detail/CVE-2024-23725","https://github.com/TryGhost/Ghost/pull/17190","https://github.com/yunaycompany/Ghost/commit/64d67717f7c76c77b3908e15627f473e9ef34002","https://github.com/TryGhost/Ghost","https://github.com/TryGhost/Ghost/releases/tag/v5.76.0"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-fh38-9fgr-454w","url":"https://osv.dev/vulnerability/GHSA-fh38-9fgr-454w"}],"summary":"Cross-site Scripting in Ghost"}