{"action":"Upgrade silverstripe/framework to 3.1.19 or later.","affected":[{"fixed":"3.1.19","introduced":"3.1.18"},{"fixed":"3.2.4","introduced":"3.2.3"},{"fixed":"3.3.2","introduced":"3.3.1"}],"component":"silverstripe/framework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["3.1.19","3.2.4","3.3.2"],"ghsa_id":"GHSA-m8v7-x398-pxrf","id":"tcs_01M5KF5BAJJX009JPMYSADG7J4","modified_at":"2024-11-28T05:38:34.388350Z","published_at":"2024-05-23T19:33:34Z","references":["https://osv.dev/vulnerability/GHSA-m8v7-x398-pxrf","https://github.com/silverstripe/silverstripe-framework/commit/a24c8260b1d048dc6a0836eb1be9a1ca2056e770","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2016-004-1.yaml","https://github.com/silverstripe/silverstripe-framework","https://github.com/silverstripe/silverstripe-framework/commits/3.3.2","https://www.silverstripe.org/download/security-releases/ss-2016-004"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-m8v7-x398-pxrf","url":"https://osv.dev/vulnerability/GHSA-m8v7-x398-pxrf"}],"summary":"Silverstripe XSS in CMS Edit Page"}