{"action":"Upgrade typo3/cms to 6.2.15 or later.","affected":[{"fixed":"6.2.15","introduced":"6.0"},{"fixed":"7.4.0","introduced":"7.0"},{"introduced":"4.0","last_affected":"4.5.40"}],"component":"typo3/cms","cve_ids":["CVE-2015-5956"],"ecosystem":"Packagist","epss":0.02006,"exploited":false,"fixed_versions":["6.2.15","7.4.0"],"ghsa_id":"GHSA-989h-wv8x-933p","id":"tcs_01M5KEZTWSXFSY3B59839J098K","modified_at":"2024-12-07T05:40:59.138352Z","published_at":"2022-05-14T02:48:01Z","references":["https://osv.dev/vulnerability/GHSA-989h-wv8x-933p","https://nvd.nist.gov/vuln/detail/CVE-2015-5956","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2015-5956.yaml","https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-009","http://packetstormsecurity.com/files/133551/Typo3-CMS-6.2.14-4.5.40-Cross-Site-Scripting.html","http://seclists.org/fulldisclosure/2015/Sep/57","http://www.securityfocus.com/archive/1/536464/100/0/threaded","http://www.securitytracker.com/id/1033551"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-989h-wv8x-933p","url":"https://osv.dev/vulnerability/GHSA-989h-wv8x-933p"}],"summary":"TYPO3 cross-site scripting (XSS)"}