{"action":"Upgrade @saltcorn/server to 1.0.0-beta.16 or later.","affected":[{"fixed":"1.0.0-beta.16","introduced":"0"}],"component":"@saltcorn/server","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.0.0-beta.16"],"ghsa_id":"GHSA-pf56-h9qf-rxq4","id":"tcs_01M5KG3D8NE88HPC7AFCHR5Y53","modified_at":"2024-10-07T15:14:40Z","published_at":"2024-10-07T15:14:40Z","references":["https://osv.dev/vulnerability/GHSA-pf56-h9qf-rxq4","https://github.com/saltcorn/saltcorn/security/advisories/GHSA-pf56-h9qf-rxq4","https://github.com/saltcorn/saltcorn/commit/3c551261d0e230635774798009951fa83a07cc3a","https://github.com/saltcorn/saltcorn","https://github.com/saltcorn/saltcorn/blob/v1.0.0-beta.13/packages/server/routes/eventlog.js#L445"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-pf56-h9qf-rxq4","url":"https://osv.dev/vulnerability/GHSA-pf56-h9qf-rxq4"}],"summary":"Saltcorn Server Stored Cross-Site Scripting (XSS) in event logs page"}