{"action":"Upgrade typo3/cms-fluid to 8.7.23 or later.","affected":[{"fixed":"8.7.23","introduced":"8.0.0"},{"fixed":"9.5.4","introduced":"9.0.0"}],"component":"typo3/cms-fluid","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["8.7.23","9.5.4"],"ghsa_id":"GHSA-22q7-cg4r-p9mx","id":"tcs_01M5KEREM9JAJ64EVA3VZH1Z5A","modified_at":"2026-07-16T19:00:22.101526494Z","published_at":"2024-05-30T15:46:01Z","references":["https://osv.dev/vulnerability/GHSA-22q7-cg4r-p9mx","https://github.com/TYPO3-CMS/fluid/commit/1a65dcc4a8f17f61a8055c0fd46c324c44c9980d","https://github.com/TYPO3-CMS/fluid/commit/a40f468d1534a68cfce91ce2a8e2a1ff81db5cf5","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-01-22-4.yaml","https://github.com/TYPO3-CMS/fluid","https://github.com/TYPO3-CMS/fluid/compare/v8.7.22...v8.7.23","https://github.com/TYPO3-CMS/fluid/compare/v9.5.3...v9.5.4","https://typo3.org/security/advisory/typo3-core-sa-2019-005"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-22q7-cg4r-p9mx","url":"https://osv.dev/vulnerability/GHSA-22q7-cg4r-p9mx"}],"summary":"TYPO3 Cross-Site Scripting in Fluid ViewHelpers"}