{"action":"Upgrade typo3/cms-fluid to 4.3.4 or later.","affected":[{"fixed":"4.3.4","introduced":"0"},{"fixed":"4.4.1","introduced":"4.4.0"}],"component":"typo3/cms-fluid","cve_ids":["CVE-2010-3672"],"ecosystem":"Packagist","epss":0.00952,"exploited":false,"fixed_versions":["4.3.4","4.4.1"],"ghsa_id":"GHSA-p78x-93mq-qwqh","id":"tcs_01M5KF65RGCZG59YR7N2BCCKRA","modified_at":"2024-02-06T21:12:30.662281Z","published_at":"2022-04-21T01:57:48Z","references":["https://osv.dev/vulnerability/GHSA-p78x-93mq-qwqh","https://nvd.nist.gov/vuln/detail/CVE-2010-3672","https://github.com/TYPO3/typo3/commit/5f13c2276c8b753ceb76b31d1034a47c781d302a","https://github.com/TYPO3/typo3/commit/fc2b43503d871b42c0e0094ea55756c089b536ea","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719","https://github.com/TYPO3-CMS/core","https://github.com/TYPO3-CMS/fluid/blob/cbce111326850c247729f097b2d1fb735e513906/Classes/ViewHelpers/Form/TextareaViewHelper.php","https://security-tracker.debian.org/tracker/CVE-2010-3672","https://typo3.org/security/advisory/typo3-sa-2010-012/#XSS"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-p78x-93mq-qwqh","url":"https://osv.dev/vulnerability/GHSA-p78x-93mq-qwqh"}],"summary":"TYPO3 vulnerable to Cross-Site Scripting in the textarea view helper"}