From 6d0b52112bfa3c3d958ad6e6001390f729570a16 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 3 Oct 2023 21:24:54 +0000 Subject: [PATCH] Publish GHSA-96mh-7xpr-qcgw --- .../GHSA-96mh-7xpr-qcgw.json | 21 +++++++++++++------ 1 file changed, 15 insertions(+), 6 deletions(-) diff --git a/advisories/github-reviewed/2022/05/GHSA-96mh-7xpr-qcgw/GHSA-96mh-7xpr-qcgw.json b/advisories/github-reviewed/2022/05/GHSA-96mh-7xpr-qcgw/GHSA-96mh-7xpr-qcgw.json index f028d66e901..fcb7a55a7d1 100644 --- a/advisories/github-reviewed/2022/05/GHSA-96mh-7xpr-qcgw/GHSA-96mh-7xpr-qcgw.json +++ b/advisories/github-reviewed/2022/05/GHSA-96mh-7xpr-qcgw/GHSA-96mh-7xpr-qcgw.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-96mh-7xpr-qcgw", - "modified": "2023-07-21T20:43:17Z", + "modified": "2023-10-03T21:23:19Z", "published": "2022-05-13T01:24:44Z", "aliases": [ "CVE-2018-7198" ], - "summary": "October CMS XSS", - "details": "October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page.", + "summary": "October CMS - RainLab Blog Plugin XSS", + "details": "The RainLab Blog Plugin used in October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page.", "severity": [ { "type": "CVSS_V3", @@ -18,7 +18,12 @@ { "package": { "ecosystem": "Packagist", - "name": "october/october" + "name": "rainlab/blog-plugin" + }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] }, "ranges": [ { @@ -28,7 +33,7 @@ "introduced": "0" }, { - "last_affected": "1.0.431" + "fixed": "1.4.1" } ] } @@ -40,9 +45,13 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7198" }, + { + "type": "WEB", + "url": "https://github.com/rainlab/blog-plugin/commit/6ae19a6e16ef3ba730692bc899851342c858bb94" + }, { "type": "PACKAGE", - "url": "https://github.com/octobercms/october/" + "url": "https://github.com/rainlab/blog-plugin" }, { "type": "WEB",