{"action":"Upgrade silverstripe/framework to 3.4.4 or later.","affected":[{"fixed":"3.4.4","introduced":"3.4.0-rc1"},{"fixed":"3.5.2","introduced":"3.5.0-rc1"}],"component":"silverstripe/framework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["3.4.4","3.5.2"],"ghsa_id":"GHSA-hhvj-mcrx-3vcf","id":"tcs_01M5KF3PX4TNZ8Q842Z9Z37JA0","modified_at":"2024-12-02T05:44:41.746270Z","published_at":"2024-05-27T19:32:44Z","references":["https://osv.dev/vulnerability/GHSA-hhvj-mcrx-3vcf","https://github.com/silverstripe/silverstripe-framework/commit/9574d627f95aca7ae0fcefcae2bf56215777e190","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2017-001-1.yaml","https://github.com/silverstripe/silverstripe-framework","https://www.silverstripe.org/download/security-releases/ss-2017-001"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-hhvj-mcrx-3vcf","url":"https://osv.dev/vulnerability/GHSA-hhvj-mcrx-3vcf"}],"summary":"silverstripe/framework has Cross-site Scripting vulnerability in page name"}