{"id":"GHSA-pm37-5j5m-6cvw","summary":"Cross-site Scripting in NukeViet CMS","details":"There is a Cross Site Scripting Stored (XSS) vulnerability in NukeViet CMS before 4.5.02.","aliases":["CVE-2022-30874"],"modified":"2023-11-08T04:09:20.092514Z","published":"2022-06-22T00:00:55Z","database_specific":{"github_reviewed_at":"2022-06-23T06:43:10Z","nvd_published_at":"2022-06-21T15:15:00Z","cwe_ids":["CWE-79"],"severity":"MODERATE","github_reviewed":true},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30874"},{"type":"WEB","url":"https://github.com/nukeviet/nukeviet/commit/1f328bb8cd256f88bd45fc3ec5a50ae951da2501"},{"type":"PACKAGE","url":"https://github.com/nukeviet/nukeviet"},{"type":"WEB","url":"https://nukeviet.vn/vi/news/Tin-tuc/thong-bao-phat-hanh-nukeviet-4-5-02-708.html"}],"affected":[{"package":{"name":"nukeviet/nukeviet","ecosystem":"Packagist","purl":"pkg:composer/nukeviet/nukeviet"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.02"}]}],"versions":["4.0.24","4.4.01"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/06/GHSA-pm37-5j5m-6cvw/GHSA-pm37-5j5m-6cvw.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"}]}