{"action":"Upgrade mautic/core to 3.2.4 or later.","affected":[{"fixed":"3.2.4","introduced":"0"}],"component":"mautic/core","cve_ids":["CVE-2020-35129"],"ecosystem":"Packagist","epss":0.01018,"exploited":false,"fixed_versions":["3.2.4"],"ghsa_id":"GHSA-3px5-wjh3-9x6r","id":"tcs_01M5KET6XM1D7GQJZJ16ZWNGES","modified_at":"2024-04-23T23:26:47.958720Z","published_at":"2022-05-24T22:28:09Z","references":["https://osv.dev/vulnerability/GHSA-3px5-wjh3-9x6r","https://nvd.nist.gov/vuln/detail/CVE-2020-35129","https://forum.mautic.org/c/announcements/16","https://github.com/mautic/mautic","https://labs.bishopfox.com/advisories/mautic-version-3.2.2"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-3px5-wjh3-9x6r","url":"https://osv.dev/vulnerability/GHSA-3px5-wjh3-9x6r"}],"summary":"Mautic stored Cross-site Scripting (XSS)"}