{"action":"Upgrade org.apache.openmeetings:openmeetings-parent to 3.1.1 or later.","affected":[{"fixed":"3.1.1","introduced":"0"}],"component":"org.apache.openmeetings:openmeetings-parent","cve_ids":["CVE-2016-2163"],"ecosystem":"Maven","epss":0.07974,"exploited":false,"fixed_versions":["3.1.1"],"ghsa_id":"GHSA-gw38-mxr2-rm8r","id":"tcs_01M5N8Z26MQ0Y5T00PPXJ72X8T","modified_at":"2023-11-08T03:58:23.794814Z","published_at":"2022-05-14T02:46:39Z","references":["https://osv.dev/vulnerability/GHSA-gw38-mxr2-rm8r","https://nvd.nist.gov/vuln/detail/CVE-2016-2163","https://github.com/apache/openmeetings","https://www.apache.org/dist/openmeetings/3.1.1/CHANGELOG","http://openmeetings.apache.org/security.html","http://packetstormsecurity.com/files/136433/Apache-OpenMeetings-3.0.7-Cross-Site-Scripting.html","http://www.securityfocus.com/archive/1/537888/100/0/threaded"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-gw38-mxr2-rm8r","url":"https://osv.dev/vulnerability/GHSA-gw38-mxr2-rm8r"}],"summary":"Apache OpenMeetings Cross-site Scripting vulnerability"}