{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"django-epiceditor","cve_ids":["CVE-2017-6591"],"ecosystem":"PyPI","epss":0.00848,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xp5m-4c9f-498q","id":"tcs_01M5KG7J63TFZRA6W0N0VY55VN","modified_at":"2023-11-08T03:59:23.891523Z","published_at":"2017-03-09T20:59:00Z","references":["https://osv.dev/vulnerability/PYSEC-2017-86","http://morningchen.com/2017/03/09/Cross-site-scripting-vulnerability-in-django-epiceditor/","http://www.securityfocus.com/bid/96946","https://github.com/advisories/GHSA-xp5m-4c9f-498q"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2017-86","url":"https://osv.dev/vulnerability/PYSEC-2017-86"},{"source":"nvd","source_id":"CVE-2017-6591","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-6591"}],"summary":"There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field."}