{"action":"Upgrade @umbraco-cms/backoffice to 14.3.1 or later.","affected":[{"fixed":"14.3.1","introduced":"14.0.0"}],"component":"@umbraco-cms/backoffice","cve_ids":["CVE-2024-47819"],"ecosystem":"npm","epss":0.0035,"exploited":false,"fixed_versions":["14.3.1"],"ghsa_id":"GHSA-c5g6-6xf7-qxp3","id":"tcs_01M5KFHVVTMN0XH83MB9R9FJE3","modified_at":"2024-10-22T19:32:47.036714Z","published_at":"2024-10-22T17:50:08Z","references":["https://osv.dev/vulnerability/GHSA-c5g6-6xf7-qxp3","https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-c5g6-6xf7-qxp3","https://nvd.nist.gov/vuln/detail/CVE-2024-47819","https://github.com/umbraco/Umbraco-CMS"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-c5g6-6xf7-qxp3","url":"https://osv.dev/vulnerability/GHSA-c5g6-6xf7-qxp3"}],"summary":"Umbraco CMS vulnerable to stored Cross-site Scripting in the \"dictionary name\" on Dictionary section"}