{"action":"Upgrade wpcloud/wp-stateless to 3.2.0 or later.","affected":[{"fixed":"3.2.0","introduced":"0"}],"component":"wpcloud/wp-stateless","cve_ids":["CVE-2022-4905"],"ecosystem":"Packagist","epss":0.0066,"exploited":false,"fixed_versions":["3.2.0"],"ghsa_id":"GHSA-9j2p-8qqf-h55c","id":"tcs_01M5KF03RYKV5R9E4JXNYEVGW7","modified_at":"2024-02-16T08:09:42.301197Z","published_at":"2023-02-13T21:31:03Z","references":["https://osv.dev/vulnerability/GHSA-9j2p-8qqf-h55c","https://nvd.nist.gov/vuln/detail/CVE-2022-4905","https://github.com/udx/wp-stateless/pull/630","https://github.com/udx/wp-stateless/commit/6aee7ae0b0beeb2232ce6e1c82aa7e2041ae151a","https://github.com/udx/wp-stateless","https://github.com/udx/wp-stateless/releases/tag/3.2.0","https://vuldb.com/?ctiid.220750","https://vuldb.com/?id.220750"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-9j2p-8qqf-h55c","url":"https://osv.dev/vulnerability/GHSA-9j2p-8qqf-h55c"}],"summary":"Cross-site Scripting in UDX Stateless Media Plugin"}