{"action":"Upgrade org.opencms:opencms-core to 17.0 or later.","affected":[{"fixed":"17.0","introduced":"16.0"}],"component":"org.opencms:opencms-core","cve_ids":["CVE-2024-5520"],"ecosystem":"Maven","epss":0.00283,"exploited":false,"fixed_versions":["17.0"],"ghsa_id":"GHSA-vg6x-pchq-98mg","id":"tcs_01M5N9E1SSJ2SWM0EX4EFT0WHV","modified_at":"2024-05-30T20:11:53.397705Z","published_at":"2024-05-30T19:49:04Z","references":["https://osv.dev/vulnerability/GHSA-vg6x-pchq-98mg","https://nvd.nist.gov/vuln/detail/CVE-2024-5520","https://github.com/alkacon/opencms-core/commit/b05a5aca0f2b03042ddf2b2bb45fe2243a4084a7","https://github.com/alkacon/opencms-core","https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-stored-alkacon-opencms"],"severity":{"label":"medium","score":6.4},"sources":[{"source":"osv","source_id":"GHSA-vg6x-pchq-98mg","url":"https://osv.dev/vulnerability/GHSA-vg6x-pchq-98mg"}],"summary":"OpenCMS Cross-Site Scripting vulnerability"}