{"action":"Upgrade ezsystems/ezfind-ls to 5.3.6.1 or later.","affected":[{"fixed":"2017.12.0.1","introduced":"2017.12.0"},{"fixed":"5.4.11.1","introduced":"5.4.0"},{"fixed":"5.3.6.1","introduced":"5.3.0"}],"component":"ezsystems/ezfind-ls","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2017.12.0.1","5.4.11.1","5.3.6.1"],"ghsa_id":"GHSA-9cq2-pcgr-8h62","id":"tcs_01M5KEZYXTQW3XDWXR8DAXPRGV","modified_at":"2024-11-29T05:30:26.042267Z","published_at":"2024-05-15T21:07:54Z","references":["https://osv.dev/vulnerability/GHSA-9cq2-pcgr-8h62","https://github.com/ezsystems/ezfind/commit/51c17ea9b1231c20db8221f34d01c649060f1e91","https://github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezfind-ls/2019-05-23-1.yaml","https://github.com/ezsystems/ezfind","https://share.ez.no/community-project/security-advisories/ezsa-2019-003-xss-in-ezfind-spellcheck","https://web.archive.org/web/20210614183107/https://share.ez.no/community-project/security-advisories/ezsa-2019-003-xss-in-ezfind-spellcheck"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-9cq2-pcgr-8h62","url":"https://osv.dev/vulnerability/GHSA-9cq2-pcgr-8h62"}],"summary":"Cross-site Scripting in eZFind spellcheck"}