{"action":"Upgrade mautic/core to 2.16.5 or later.","affected":[{"fixed":"3.2.4","introduced":"3.2.0"},{"fixed":"2.16.5","introduced":"2.0.0"}],"component":"mautic/core","cve_ids":["CVE-2020-35128"],"ecosystem":"Packagist","epss":0.01674,"exploited":false,"fixed_versions":["3.2.4","2.16.5"],"ghsa_id":"GHSA-98j2-3jv7-274m","id":"tcs_01M5KEZV56EVNZZA4H23AG36YT","modified_at":"2024-04-23T23:26:47.890176Z","published_at":"2022-05-24T17:39:28Z","references":["https://osv.dev/vulnerability/GHSA-98j2-3jv7-274m","https://nvd.nist.gov/vuln/detail/CVE-2020-35128","https://forum.mautic.org/c/announcements/16","https://forum.mautic.org/t/security-release-for-all-versions-of-mautic-prior-to-2-16-5-and-3-2-4/17786","https://github.com/mautic/mautic","https://labs.bishopfox.com/advisories/mautic-version-3.2.2"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-98j2-3jv7-274m","url":"https://osv.dev/vulnerability/GHSA-98j2-3jv7-274m"}],"summary":"Mautic stored Cross-site Scripting (XSS)"}