{"action":"Upgrade silverstripe/framework to 4.4.5 or later.","affected":[{"fixed":"4.5.2","introduced":"4.5.0"},{"fixed":"4.4.5","introduced":"4.0.0"}],"component":"silverstripe/framework","cve_ids":["CVE-2019-19325"],"ecosystem":"Packagist","epss":0.00685,"exploited":false,"fixed_versions":["4.5.2","4.4.5"],"ghsa_id":"GHSA-qvrv-2x7x-78x2","id":"tcs_01M5KF7MYGNDMS046FD2ATXEYR","modified_at":"2024-02-16T08:12:56.084423Z","published_at":"2020-02-24T17:33:31Z","references":["https://osv.dev/vulnerability/GHSA-qvrv-2x7x-78x2","https://nvd.nist.gov/vuln/detail/CVE-2019-19325","https://github.com/silverstripe/silverstripe-framework/commit/49fda52b12ba59f0a04bcabf78425586a8779e89","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/CVE-2019-19325.yaml","https://www.silverstripe.org/download/security-releases/cve-2019-19325"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-qvrv-2x7x-78x2","url":"https://osv.dev/vulnerability/GHSA-qvrv-2x7x-78x2"}],"summary":"Reflected XSS in SilverStripe"}