{"action":"Upgrade typo3/cms-core to 7.6.53 or later.","affected":[{"fixed":"7.6.53","introduced":"7.0.0"},{"fixed":"8.7.42","introduced":"8.0.0"},{"fixed":"10.4.19","introduced":"10.0.0"},{"fixed":"11.3.2","introduced":"11.0.0"},{"fixed":"9.5.29","introduced":"9.0.0"}],"component":"typo3/cms-core","cve_ids":["CVE-2021-32768"],"ecosystem":"Packagist","epss":0.00727,"exploited":false,"fixed_versions":["7.6.53","8.7.42","10.4.19","11.3.2","9.5.29"],"ghsa_id":"GHSA-c5c9-8c6m-727v","id":"tcs_01M5KF0M0CT4G5R74S8M5V0DDH","modified_at":"2026-07-08T06:29:25.329956778Z","published_at":"2021-08-19T15:53:12Z","references":["https://osv.dev/vulnerability/GHSA-c5c9-8c6m-727v","https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-c5c9-8c6m-727v","https://github.com/TYPO3/typo3/security/advisories/GHSA-c5c9-8c6m-727v","https://nvd.nist.gov/vuln/detail/CVE-2021-32768","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32768.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32768.yaml","https://typo3.org/security/advisory/typo3-core-sa-2021-013"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-c5c9-8c6m-727v","url":"https://osv.dev/vulnerability/GHSA-c5c9-8c6m-727v"}],"summary":"Cross-Site Scripting via Rich-Text Content"}