{"action":"Upgrade silverstripe/cms to 3.1.10 or later.","affected":[{"fixed":"3.1.10","introduced":"3.1.0"}],"component":"silverstripe/cms","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["3.1.10"],"ghsa_id":"GHSA-r97r-64vp-fghm","id":"tcs_01M5KF83KKWHGYN27393X3R8A5","modified_at":"2024-12-07T05:24:40.106362Z","published_at":"2024-05-22T18:53:38Z","references":["https://osv.dev/vulnerability/GHSA-r97r-64vp-fghm","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/cms/SS-2015-005-1.yaml","https://github.com/silverstripe/silverstripe-cms","https://www.silverstripe.org/software/download/security-releases/ss-2015-005"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-r97r-64vp-fghm","url":"https://osv.dev/vulnerability/GHSA-r97r-64vp-fghm"}],"summary":"Silverstripe XSS vulnerability via VirtualPage"}