{"action":"Upgrade silverstripe/admin to 1.13.6 or later.","affected":[{"fixed":"1.13.6","introduced":"1.0.0"}],"component":"silverstripe/admin","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.13.6"],"ghsa_id":"GHSA-jxcx-3h54-qqxx","id":"tcs_01M5KF4ZTDFQXTE8TKXRMWRTNF","modified_at":"2024-11-29T05:39:32.067990Z","published_at":"2023-08-23T19:43:56Z","references":["https://osv.dev/vulnerability/GHSA-jxcx-3h54-qqxx","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/admin/SS-2023-002.yaml","https://github.com/silverstripe/silverstripe-admin","https://www.silverstripe.org/download/security-releases/SS-2023-002"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-jxcx-3h54-qqxx","url":"https://osv.dev/vulnerability/GHSA-jxcx-3h54-qqxx"}],"summary":"SilverStripe CMS Cross-site Scripting vulnerabilities inherited from TinyMCE"}