{"action":"Upgrade backdrop/backdrop to 1.24.2 or later.","affected":[{"fixed":"1.24.2","introduced":"0"}],"component":"backdrop/backdrop","cve_ids":["CVE-2023-31045"],"ecosystem":"Packagist","epss":0.00531,"exploited":false,"fixed_versions":["1.24.2"],"ghsa_id":"GHSA-3862-c622-v4fp","id":"tcs_01M5KESRH5ZQJ082CG8PHWCGJB","modified_at":"2024-08-02T11:02:40.912315Z","published_at":"2023-04-24T09:30:19Z","references":["https://osv.dev/vulnerability/GHSA-3862-c622-v4fp","https://nvd.nist.gov/vuln/detail/CVE-2023-31045","https://github.com/backdrop/backdrop-issues/issues/6065","https://github.com/backdrop-ops/backdrop-composer","https://github.com/backdrop/backdrop/releases/tag/1.24.2"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-3862-c622-v4fp","url":"https://osv.dev/vulnerability/GHSA-3862-c622-v4fp"}],"summary":"Cross-site Scripting in Backdrop CMS"}