{"action":"No fix published. Pin and monitor.","affected":[],"component":"django-epiceditor","cve_ids":["CVE-2017-6591"],"ecosystem":"PyPI","epss":0.00848,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xp5m-4c9f-498q","id":"tcs_01M5KG4F2RQ8SSKXGBNDDER7YB","modified_at":"2024-09-16T23:02:16Z","published_at":"2018-07-13T15:17:18Z","references":["https://osv.dev/vulnerability/GHSA-xp5m-4c9f-498q","https://nvd.nist.gov/vuln/detail/CVE-2017-6591","https://github.com/advisories/GHSA-xp5m-4c9f-498q","https://github.com/barraq/django-epiceditor","https://github.com/pypa/advisory-database/tree/main/vulns/django-epiceditor/PYSEC-2017-86.yaml","https://web.archive.org/web/20170706013108/http://www.morningchen.com/2017/03/09/Cross-site-scripting-vulnerability-in-django-epiceditor","https://web.archive.org/web/20200227183140/http://www.securityfocus.com/bid/96946"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-xp5m-4c9f-498q","url":"https://osv.dev/vulnerability/GHSA-xp5m-4c9f-498q"}],"summary":"django-epiceditor vulnerable to XSS in form field"}