{"action":"Upgrade mediawiki/core to 1.31.7 or later.","affected":[{"fixed":"1.31.7","introduced":"1.31.0"},{"fixed":"1.33.3","introduced":"1.33.0"},{"fixed":"1.34.1","introduced":"1.34.0"}],"component":"mediawiki/core","cve_ids":["CVE-2020-10960"],"ecosystem":"Packagist","epss":0.01152,"exploited":false,"fixed_versions":["1.31.7","1.33.3","1.34.1"],"ghsa_id":"GHSA-pfm2-mqwj-ggm5","id":"tcs_01M5KF6AVDGZZMA4SG8FNESMEH","modified_at":"2024-04-01T20:11:58.751725Z","published_at":"2022-05-24T17:13:21Z","references":["https://osv.dev/vulnerability/GHSA-pfm2-mqwj-ggm5","https://nvd.nist.gov/vuln/detail/CVE-2020-10960","https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-10960.yaml","https://lists.wikimedia.org/pipermail/wikitech-l/2020-March/093243.html","https://phabricator.wikimedia.org/T246602"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-pfm2-mqwj-ggm5","url":"https://osv.dev/vulnerability/GHSA-pfm2-mqwj-ggm5"}],"summary":"MediaWiki makeCollapsible allows applying event handler to any CSS selector"}