{"action":"Upgrade kitodo/presentation to 3.1.2 or later.","affected":[{"fixed":"3.1.2","introduced":"0"}],"component":"kitodo/presentation","cve_ids":["CVE-2020-16095"],"ecosystem":"Packagist","epss":0.00869,"exploited":false,"fixed_versions":["3.1.2"],"ghsa_id":"GHSA-fpqv-x9hm-35j9","id":"tcs_01M5KF1YGCPDNE7S058P8N15K2","modified_at":"2024-06-03T18:49:22.008217Z","published_at":"2020-07-31T17:39:22Z","references":["https://osv.dev/vulnerability/GHSA-fpqv-x9hm-35j9","https://github.com/kitodo/kitodo-presentation/security/advisories/GHSA-fpqv-x9hm-35j9","https://nvd.nist.gov/vuln/detail/CVE-2020-16095","https://github.com/kitodo/kitodo-presentation/commit/6a67256388350cc69efa7f36bbaee50c919ca23c","https://github.com/kitodo/kitodo-presentation","https://typo3.org/help/security-advisories","https://typo3.org/security/advisory/typo3-ext-sa-2020-015"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-fpqv-x9hm-35j9","url":"https://osv.dev/vulnerability/GHSA-fpqv-x9hm-35j9"}],"summary":"Cross-site Scripting vulnerability in Kitodo.Presentation"}