{"action":"Upgrade silverstripe/cms to 2.3.5 or later.","affected":[{"fixed":"2.3.5","introduced":"0"}],"component":"silverstripe/cms","cve_ids":["CVE-2010-1593"],"ecosystem":"Packagist","epss":0.026,"exploited":false,"fixed_versions":["2.3.5"],"ghsa_id":"GHSA-wg4m-vvp6-2hc5","id":"tcs_01M5KFA1TKY0SY3T8Y60RMPY15","modified_at":"2025-04-11T20:58:44.840431Z","published_at":"2022-05-14T02:45:01Z","references":["https://osv.dev/vulnerability/GHSA-wg4m-vvp6-2hc5","https://nvd.nist.gov/vuln/detail/CVE-2010-1593","https://exchange.xforce.ibmcloud.com/vulnerabilities/55838","https://exchange.xforce.ibmcloud.com/vulnerabilities/55839","https://web.archive.org/web/20200228222759/https://www.securityfocus.com/bid/37923","https://web.archive.org/web/20201208002434/http://www.securityfocus.com/archive/1/509139/100/0/threaded","http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0450.html","http://groups.google.com/group/silverstripe-announce/browse_thread/thread/f51749342eee9456","http://open.silverstripe.org/changeset/97074","http://open.silverstripe.org/wiki/ChangeLog/2.3.5","http://www.silverstripe.org/security-releases"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-wg4m-vvp6-2hc5","url":"https://osv.dev/vulnerability/GHSA-wg4m-vvp6-2hc5"}],"summary":"SilverStripe vulnerable to Cross-site Scripting"}