{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"17.0"}],"component":"org.opencms:opencms-core","cve_ids":["CVE-2024-42699"],"ecosystem":"Maven","epss":0.00356,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h75c-f2xx-9vxv","id":"tcs_01M5N8ZYA3PTVYHA0TEQQ5V01X","modified_at":"2025-04-21T17:12:01.740920Z","published_at":"2025-04-21T15:31:25Z","references":["https://osv.dev/vulnerability/GHSA-h75c-f2xx-9vxv","https://nvd.nist.gov/vuln/detail/CVE-2024-42699","https://github.com/Sidd545-cr/CVE/blob/main/CVE-2024-42699%20-%20Stored%20XSS%20in%20image%20title.pdf","https://github.com/alkacon/opencms-core"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-h75c-f2xx-9vxv","url":"https://osv.dev/vulnerability/GHSA-h75c-f2xx-9vxv"}],"summary":"OpenCMS Cross-Site Scripting vulnerability"}