{"action":"Upgrade typo3/cms-core to 8.7.21 or later.","affected":[{"fixed":"8.7.21","introduced":"8.0.0"},{"fixed":"9.5.2","introduced":"9.0.0"}],"component":"typo3/cms-core","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["8.7.21","9.5.2"],"ghsa_id":"GHSA-wg8h-gxf4-g4gh","id":"tcs_01M5KFA2A4TZ8G09RBPQ2JJF1X","modified_at":"2024-12-05T05:43:42.691131Z","published_at":"2024-05-30T14:48:31Z","references":["https://osv.dev/vulnerability/GHSA-wg8h-gxf4-g4gh","https://github.com/TYPO3-CMS/core/commit/23800859368e2af60604ff27f3eed9971ccd9fbd","https://github.com/TYPO3-CMS/core/commit/f9e5e255f41c248e115b2a755b797ce48d10d72a","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-1.yaml","https://github.com/TYPO3-CMS/core","https://typo3.org/security/advisory/typo3-core-sa-2018-006"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-wg8h-gxf4-g4gh","url":"https://osv.dev/vulnerability/GHSA-wg8h-gxf4-g4gh"}],"summary":"TYPO3 Cross-Site Scripting in Online Media Asset Rendering"}