{"action":"Upgrade livewire/livewire to 3.4.9 or later.","affected":[{"fixed":"3.4.9","introduced":"3.3.5"}],"component":"livewire/livewire","cve_ids":["CVE-2024-21504"],"ecosystem":"Packagist","epss":0.00516,"exploited":false,"fixed_versions":["3.4.9"],"ghsa_id":"GHSA-389c-cf87-qmwj","id":"tcs_01M5KESRYSZSWRZEB1ESJB0215","modified_at":"2024-03-20T15:41:56.469581Z","published_at":"2024-03-19T06:30:53Z","references":["https://osv.dev/vulnerability/GHSA-389c-cf87-qmwj","https://nvd.nist.gov/vuln/detail/CVE-2024-21504","https://github.com/livewire/livewire/pull/8117","https://github.com/livewire/livewire/commit/c65b3f0798ab2c9338213ede3588c3cdf4e6fcc0","https://github.com/livewire/livewire","https://github.com/livewire/livewire/releases/tag/v3.4.9","https://security.snyk.io/vuln/SNYK-PHP-LIVEWIRELIVEWIRE-6446222"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-389c-cf87-qmwj","url":"https://osv.dev/vulnerability/GHSA-389c-cf87-qmwj"}],"summary":"Cross-site Scripting in livewire/livewire"}