{"action":"Upgrade ezyang/htmlpurifier to 2.0.1 or later.","affected":[{"fixed":"2.0.1","introduced":"0"}],"component":"ezyang/htmlpurifier","cve_ids":["CVE-2007-3498"],"ecosystem":"Packagist","epss":0.01033,"exploited":false,"fixed_versions":["2.0.1"],"ghsa_id":"GHSA-6fh7-fwqj-mv49","id":"tcs_01M5KEX035QV26GMYK4EB7J13C","modified_at":"2024-10-29T21:27:30.376339Z","published_at":"2022-05-01T18:14:25Z","references":["https://osv.dev/vulnerability/GHSA-6fh7-fwqj-mv49","https://nvd.nist.gov/vuln/detail/CVE-2007-3498","https://github.com/ezyang/htmlpurifier/commit/96b571d23639bd70768b8db626ecaf8bbb7ca5a3","https://exchange.xforce.ibmcloud.com/vulnerabilities/35300","https://github.com/ezyang/htmlpurifier","https://github.com/ezyang/htmlpurifier/commits/v2.0.1/smoketests/configForm.php","https://web.archive.org/web/20200228110020/http://www.securityfocus.com/bid/24699","http://htmlpurifier.org/svnroot/htmlpurifier/tags/2.0.1/NEWS"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-6fh7-fwqj-mv49","url":"https://osv.dev/vulnerability/GHSA-6fh7-fwqj-mv49"}],"summary":"HTML Purifier Cross-site Scripting vulnerability"}