{"action":"Upgrade sylius/sylius to 1.9.10 or later.","affected":[{"fixed":"1.9.10","introduced":"0"},{"fixed":"1.10.11","introduced":"1.10.0"},{"fixed":"1.11.2","introduced":"1.11.0"}],"component":"sylius/sylius","cve_ids":["CVE-2021-3841"],"ecosystem":"Packagist","epss":0.00256,"exploited":false,"fixed_versions":["1.9.10","1.10.11","1.11.2"],"ghsa_id":"GHSA-hhvr-2q69-4563","id":"tcs_01M5KF3PZS57WV5546TGECJ6TA","modified_at":"2024-11-15T20:57:25.204534Z","published_at":"2024-11-15T12:31:44Z","references":["https://osv.dev/vulnerability/GHSA-hhvr-2q69-4563","https://nvd.nist.gov/vuln/detail/CVE-2021-3841","https://github.com/sylius/sylius/commit/3da169e0c23e752974d74223cc536c29a2a82edc","https://github.com/sylius/sylius","https://huntr.com/bounties/1625506791178-Sylius/Sylius"],"severity":{"label":"medium","score":4.1},"sources":[{"source":"osv","source_id":"GHSA-hhvr-2q69-4563","url":"https://osv.dev/vulnerability/GHSA-hhvr-2q69-4563"}],"summary":"Cross site scripting in sylius/sylius"}