{"id":"GHSA-pm37-5j5m-6cvw","aliases":["CVE-2022-30874"],"title":"Cross-site Scripting in NukeViet CMS","description":"There is a Cross Site Scripting Stored (XSS) vulnerability in NukeViet CMS before 4.5.02.","severity":"medium","score":5.4,"published":"2022-06-22T00:00:55.000Z","modified":"2023-11-08T04:09:20.092Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"nukeviet/nukeviet","ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.02"}],"type":"ECOSYSTEM"}],"versions":["4.0.24","4.4.01"],"fixed":["4.5.02"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2022-30874","https://github.com/nukeviet/nukeviet/commit/1f328bb8cd256f88bd45fc3ec5a50ae951da2501","https://github.com/nukeviet/nukeviet","https://nukeviet.vn/vi/news/Tin-tuc/thong-bao-phat-hanh-nukeviet-4-5-02-708.html"],"sources":[{"name":"OSV","id":"GHSA-pm37-5j5m-6cvw","modified":"2023-11-08T04:09:20.092514Z","url":"https://osv.dev/vulnerability/GHSA-pm37-5j5m-6cvw"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","score":5.4}]}