{"action":"Upgrade typo3/cms-core to 7.6.58 or later.","affected":[{"fixed":"7.6.58","introduced":"7.0.0"},{"fixed":"8.7.48","introduced":"8.0.0"},{"fixed":"9.5.37","introduced":"9.0.0"},{"fixed":"10.4.32","introduced":"10.0.0"},{"fixed":"11.5.16","introduced":"11.0.0"}],"component":"typo3/cms-core","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["7.6.58","8.7.48","9.5.37","10.4.32","11.5.16"],"ghsa_id":"GHSA-gqqf-g5r7-84vf","id":"tcs_01M5KF31KSX39NRPTRF8DCDRRJ","modified_at":"2024-12-06T05:37:17.196377Z","published_at":"2022-09-15T03:26:51Z","references":["https://osv.dev/vulnerability/GHSA-gqqf-g5r7-84vf","https://github.com/TYPO3/typo3/security/advisories/GHSA-gqqf-g5r7-84vf","https://github.com/TYPO3/typo3/commit/d4f260570abd934fcf3819370a135bef33d729b7","https://github.com/TYPO3/typo3"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-gqqf-g5r7-84vf","url":"https://osv.dev/vulnerability/GHSA-gqqf-g5r7-84vf"}],"summary":"TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection"}