{"action":"Upgrade tinymce/tinymce to 5.10.7 (5.x) or 6.3.1 (6.x) or later.","affected":[{"fixed":"6.3.1","introduced":"6.0.0"},{"fixed":"5.10.7","introduced":"0"}],"component":"tinymce/tinymce","cve_ids":["CVE-2022-23494"],"ecosystem":"Packagist","epss":0.01015,"exploited":false,"fixed_versions":["6.3.1","5.10.7"],"ghsa_id":"GHSA-gg8r-xjwq-4w92","id":"tcs_01M5KF2QF1V20BH4S0DGWW72XY","modified_at":"2023-11-08T04:08:19.194114Z","published_at":"2022-12-08T23:30:01Z","references":["https://osv.dev/vulnerability/GHSA-gg8r-xjwq-4w92","https://github.com/tinymce/tinymce/security/advisories/GHSA-gg8r-xjwq-4w92","https://nvd.nist.gov/vuln/detail/CVE-2022-23494","https://github.com/tinymce/tinymce/commit/6923d85eba6de3e08ebc9c5a387b5abdaa21150e","https://github.com/tinymce/tinymce/commit/8bb2d2646d4e1a718fce61a775fa22e9d317b32d","https://github.com/tinymce/tinymce","https://www.tiny.cloud/docs/release-notes/release-notes5107/#securityfixes","https://www.tiny.cloud/docs/tinymce/6/6.3-release-notes/#security-fixes","https://www.tiny.cloud/docs/tinymce/6/file-image-upload/#images_upload_handler"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-gg8r-xjwq-4w92#Packagist/tinymce/tinymce","url":"https://osv.dev/vulnerability/GHSA-gg8r-xjwq-4w92"}],"summary":"Cross-site scripting vulnerability in TinyMCE alerts"}