{"action":"Upgrade xataface/xataface to 3.0.0 or later.","affected":[{"fixed":"3.0.0","introduced":"0"}],"component":"xataface/xataface","cve_ids":["CVE-2021-4303"],"ecosystem":"Packagist","epss":0.00535,"exploited":false,"fixed_versions":["3.0.0"],"ghsa_id":"GHSA-64wv-c7jw-jw2q","id":"tcs_01M5KEWMQ7VJP836D3MFWTZQWP","modified_at":"2023-11-08T04:07:08.300766Z","published_at":"2023-01-05T09:30:26Z","references":["https://osv.dev/vulnerability/GHSA-64wv-c7jw-jw2q","https://nvd.nist.gov/vuln/detail/CVE-2021-4303","https://github.com/shannah/xataface/commit/94143a4299e386f33bf582139cd4702571d93bde","https://github.com/shannah/xataface","https://github.com/shannah/xataface/releases/tag/3.0.0","https://vuldb.com/?ctiid.217442","https://vuldb.com/?id.217442"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-64wv-c7jw-jw2q","url":"https://osv.dev/vulnerability/GHSA-64wv-c7jw-jw2q"}],"summary":"Xataface vulnerable to Cross-site Scripting"}