{"action":"Upgrade tpwd/ke_search to 4.0.3 or later.","affected":[{"fixed":"5.0.2","introduced":"5.0.0"},{"fixed":"4.6.6","introduced":"4.1.0"},{"fixed":"4.0.3","introduced":"0"}],"component":"tpwd/ke_search","cve_ids":["CVE-2023-35783"],"ecosystem":"Packagist","epss":0.00341,"exploited":false,"fixed_versions":["5.0.2","4.6.6","4.0.3"],"ghsa_id":"GHSA-f4m6-x2xj-jc7w","id":"tcs_01M5KF1EDDQSJGB8QGWDW20D6H","modified_at":"2024-02-16T08:18:03.992437Z","published_at":"2023-06-16T15:30:19Z","references":["https://osv.dev/vulnerability/GHSA-f4m6-x2xj-jc7w","https://nvd.nist.gov/vuln/detail/CVE-2023-35783","https://github.com/tpwd/ke_search/commit/14fa0703c2469e04eb398be4ae6268ec6ad6e720","https://github.com/tpwd/ke_search/commit/b0f05d7e7e207bc0d5051bd96f3ff43c5c3658c6","https://github.com/tpwd/ke_search/commit/d81a1f2f3dcb612220d505b495bc2851b87f6f74","https://github.com/FriendsOfPHP/security-advisories/blob/master/tpwd/ke_search/CVE-2023-35783.yaml","https://github.com/tpwd/ke_search","https://typo3.org/security/advisory/typo3-ext-sa-2023-004"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-f4m6-x2xj-jc7w","url":"https://osv.dev/vulnerability/GHSA-f4m6-x2xj-jc7w"}],"summary":"ke_search (aka Faceted Search) vulnerable to Cross-Site Scripting"}