{"action":"Upgrade mavon-editor to 2.8.2 or later.","affected":[{"fixed":"2.8.2","introduced":"0"}],"component":"mavon-editor","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.8.2"],"ghsa_id":"GHSA-jfcc-rm7f-xgf8","id":"tcs_01M5KFXTMX36R2GPMFAAFFYCBD","modified_at":"2021-09-29T18:37:46Z","published_at":"2020-09-03T20:36:35Z","references":["https://osv.dev/vulnerability/GHSA-jfcc-rm7f-xgf8","https://github.com/hinesboy/mavonEditor/issues/472","https://github.com/hinesboy/mavonEditor/pull/548","https://github.com/hinesboy/mavonEditor/commit/5592ec3761bd3b5a12ba6f99ce3c4057c6e33f72","https://github.com/hinesboy/mavonEditor","https://snyk.io/vuln/SNYK-JS-MAVONEDITOR-459108","https://www.npmjs.com/advisories/1169","https://www.npmjs.com/package/mavon-editor"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-jfcc-rm7f-xgf8","url":"https://osv.dev/vulnerability/GHSA-jfcc-rm7f-xgf8"}],"summary":"Cross-Site Scripting in mavon-editor"}