{"action":"Upgrade ezsystems/ezplatform-admin-ui-assets to 4.2.1 or later.","affected":[{"fixed":"4.2.1","introduced":"4.2.0"},{"fixed":"5.0.1","introduced":"5.0.0"},{"fixed":"5.1.1","introduced":"5.1.0"}],"component":"ezsystems/ezplatform-admin-ui-assets","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["4.2.1","5.0.1","5.1.1"],"ghsa_id":"GHSA-4c2w-v5rq-5mx7","id":"tcs_01M5KETVVCYV9BYMK3NM4GYX23","modified_at":"2024-11-29T05:27:29.593383Z","published_at":"2024-05-15T21:10:29Z","references":["https://osv.dev/vulnerability/GHSA-4c2w-v5rq-5mx7","https://ezplatform.com/security-advisories/ezsa-2020-005-editor-xss-and-trashed-drafts-in-review-queue","https://github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezplatform-admin-ui-assets/2020-08-07-1.yaml","https://github.com/ezsystems/ezplatform-admin-ui-assets"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-4c2w-v5rq-5mx7","url":"https://osv.dev/vulnerability/GHSA-4c2w-v5rq-5mx7"}],"summary":"eZ Platform Editor Cross-site Scripting (XSS)"}