{"action":"Upgrade typo3/cms-backend to 4.1.14 or later.","affected":[{"fixed":"4.1.14","introduced":"4.1.0"},{"fixed":"4.2.13","introduced":"4.2.0"},{"fixed":"4.3.4","introduced":"4.3.0"},{"fixed":"4.4.1","introduced":"4.4.0"}],"component":"typo3/cms-backend","cve_ids":["CVE-2010-3659"],"ecosystem":"Packagist","epss":0.01279,"exploited":false,"fixed_versions":["4.1.14","4.2.13","4.3.4","4.4.1"],"ghsa_id":"GHSA-jr79-65xr-q7cx","id":"tcs_01M5KF4V77QHGPXNEXT3GWXTFG","modified_at":"2024-02-07T23:28:10.058038Z","published_at":"2022-05-17T00:26:03Z","references":["https://osv.dev/vulnerability/GHSA-jr79-65xr-q7cx","https://nvd.nist.gov/vuln/detail/CVE-2010-3659","https://github.com/TYPO3-CMS/backend","https://security-tracker.debian.org/tracker/CVE-2010-3659","https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-012","https://web.archive.org/web/20120903133822/http://www.securityfocus.com/bid/42029","http://www.openwall.com/lists/oss-security/2010/09/28/8","http://www.openwall.com/lists/oss-security/2014/02/12/8"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-jr79-65xr-q7cx","url":"https://osv.dev/vulnerability/GHSA-jr79-65xr-q7cx"}],"summary":"TYPO3 Cross-site Scripting vulnerability in the extension manager and backend forms"}