{"id":"GHSA-qr6m-f3gv-8678","aliases":["CVE-2022-23896"],"title":"Cross-site Scripting in admidio","description":"Admidio 4.1.2 version is affected by stored cross-site scripting (XSS).","severity":"medium","score":5.4,"published":"2022-06-29T00:00:55.000Z","modified":"2024-02-21T05:29:04.158Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"admidio/admidio","ranges":[{"events":[{"introduced":"0"},{"fixed":"4.1.3"}],"type":"ECOSYSTEM"}],"versions":["4.1.0"],"fixed":["4.1.3"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2022-23896","https://github.com/admidio/admidio/commit/1ff30f7cc7159bfa0235a7df3f60c0771a0e22a9","https://github.com/Admidio/admidio","https://huntr.dev/bounties/79c2d16c-bae2-417f-ab50-10c52707a30f"],"sources":[{"name":"OSV","id":"GHSA-qr6m-f3gv-8678","modified":"2024-02-21T05:29:04.158528Z","url":"https://osv.dev/vulnerability/GHSA-qr6m-f3gv-8678"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","score":5.4}]}