x/vulndb: potential Go vuln in github.com/openark/orchestrator: GHSA-752c-vfpf-cp2w

[GoVulnBot]

In GitHub Security Advisory GHSA-752c-vfpf-cp2w, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/openark/orchestrator	3.2.4	< 3.2.4

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/openark/orchestrator
      versions:
        - fixed: 3.2.4
      vulnerable_at: 3.2.3+incompatible
      packages:
        - package: github.com/openark/orchestrator
summary: openark/orchestrator cross-site scripting vulnerability
description: |-
    resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows
    XSS via the orchestrator-msg parameter.
cves:
    - CVE-2021-27940
ghsas:
    - GHSA-752c-vfpf-cp2w
references:
    - web: https://nvd.nist.gov/vuln/detail/CVE-2021-27940
    - fix: https://github.com/openark/orchestrator/pull/1313
    - web: https://github.com/openark/orchestrator/releases/tag/v3.2.4
    - web: https://www.youtube.com/watch?v=DOYm0DIS3Us
    - fix: https://github.com/openark/orchestrator/pull/1313/commits/76ceb6b0e013e1e815eb008dec90295860b06cf3
    - advisory: https://github.com/advisories/GHSA-752c-vfpf-cp2w

[gopherbot]

Change https://go.dev/cl/509516 mentions this issue: data/excluded: batch add 6 excluded reports