{"action":"Upgrade typo3/cms to 8.7.23 or later.","affected":[{"fixed":"8.7.23","introduced":"8.0.0"},{"fixed":"9.5.4","introduced":"9.0.0"}],"component":"typo3/cms","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["8.7.23","9.5.4"],"ghsa_id":"GHSA-85ch-44w7-rf32","id":"tcs_01M5KEYP0DRN7EZQ5FSSVY4HA4","modified_at":"2024-12-04T05:31:26.997984Z","published_at":"2024-06-07T17:08:39Z","references":["https://osv.dev/vulnerability/GHSA-85ch-44w7-rf32","https://github.com/TYPO3/typo3/commit/732c4acfaeaa7fd193674cd4d1ca7e369e21b96f","https://github.com/TYPO3/typo3/commit/c94f566514eaff62dd836541c99b438ac55f6842","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2019-01-22-4.yaml","https://github.com/TYPO3/typo3","https://typo3.org/security/advisory/typo3-core-sa-2019-005"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-85ch-44w7-rf32","url":"https://osv.dev/vulnerability/GHSA-85ch-44w7-rf32"}],"summary":"TYPO3 Cross-Site Scripting in Fluid ViewHelpers"}