{"action":"Upgrade DotNetNuke.Core to 03.02.01 or later.","affected":[{"fixed":"03.02.01","introduced":"0"}],"component":"DotNetNuke.Core","cve_ids":["CVE-2007-0660"],"ecosystem":"NuGet","epss":0.01242,"exploited":false,"fixed_versions":["03.02.01"],"ghsa_id":"GHSA-xr96-7ccp-pg5c","id":"tcs_01M5N95Q5GA7DBQK32SQT34K46","modified_at":"2023-11-08T03:56:47.579012Z","published_at":"2022-05-01T17:46:11Z","references":["https://osv.dev/vulnerability/GHSA-xr96-7ccp-pg5c","https://nvd.nist.gov/vuln/detail/CVE-2007-0660","https://exchange.xforce.ibmcloud.com/vulnerabilities/32037","https://web.archive.org/web/20071128032502/http://www.dotnetnuke.com/Default.aspx?tabid=825&EntryID=1278","https://web.archive.org/web/20081007210427/http://www.securityfocus.com/bid/22334"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-xr96-7ccp-pg5c","url":"https://osv.dev/vulnerability/GHSA-xr96-7ccp-pg5c"}],"summary":"DotNetNuke Vulnerable to XSS in Pass-Through Values"}