{"action":"Upgrade github.com/gouniverse/cms to 1.4.1 or later.","affected":[{"fixed":"1.4.1","introduced":"0"}],"component":"github.com/gouniverse/cms","cve_ids":["CVE-2024-8572"],"ecosystem":"Go","epss":0.00428,"exploited":false,"fixed_versions":["1.4.1"],"ghsa_id":"GHSA-pv7h-hg6m-82j8","id":"tcs_01M5KG5ARPXSCVVPGCAFDB44Q4","modified_at":"2026-03-03T04:55:47.819081Z","published_at":"2024-09-13T21:52:58Z","references":["https://osv.dev/vulnerability/GO-2024-3125","https://github.com/advisories/GHSA-pv7h-hg6m-82j8","https://nvd.nist.gov/vuln/detail/CVE-2024-8572","https://github.com/gouniverse/cms/commit/3e661cdfb4beeb9fe2ad507cdb8104c0b17d072c","https://github.com/gouniverse/cms/issues/5","https://github.com/gouniverse/cms/issues/5#issuecomment-2330848731","https://github.com/gouniverse/cms/releases/tag/v1.4.1","https://vuldb.com/?ctiid.276802","https://vuldb.com/?id.276802","https://vuldb.com/?submit.401896"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GO-2024-3125","url":"https://osv.dev/vulnerability/GO-2024-3125"},{"source":"nvd","source_id":"CVE-2024-8572","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8572"}],"summary":"Gouniverse GoLang CMS vulnerable to Cross-site Scripting in github.com/gouniverse/cms"}