{"action":"Upgrade pimcore/pimcore to 10.4 or later.","affected":[{"fixed":"10.4","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2022-1351"],"ecosystem":"Packagist","epss":0.00803,"exploited":false,"fixed_versions":["10.4"],"ghsa_id":"GHSA-xcr3-4qvr-54rh","id":"tcs_01M5KFAYT0N2Y3NN8FMEDFT6Y9","modified_at":"2023-11-08T04:07:47.572914Z","published_at":"2022-04-15T00:00:45Z","references":["https://osv.dev/vulnerability/GHSA-xcr3-4qvr-54rh","https://nvd.nist.gov/vuln/detail/CVE-2022-1351","https://github.com/pimcore/pimcore/commit/8c39a8b8f14dce078b31f61c4da599ca6f8fc7ac","https://github.com/pimcore/pimcore","https://huntr.dev/bounties/c23ae6c2-2e53-4bf5-85b0-e90418476615"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-xcr3-4qvr-54rh","url":"https://osv.dev/vulnerability/GHSA-xcr3-4qvr-54rh"}],"summary":"Cross-site Scripting in Pimcore"}