{"action":"Upgrade primefaces to 8.0 or later.","affected":[{"fixed":"8.0","introduced":"0"}],"component":"primefaces","cve_ids":["CVE-2020-10544"],"ecosystem":"npm","epss":0.00832,"exploited":false,"fixed_versions":["8.0"],"ghsa_id":"GHSA-fw5f-7c6c-3vmv","id":"tcs_01M5KFPDV44JWT6JN4PS6B4XYG","modified_at":"2026-09-10T03:49:26.864784158Z","published_at":"2021-05-07T16:16:30Z","references":["https://osv.dev/vulnerability/GHSA-fw5f-7c6c-3vmv","https://nvd.nist.gov/vuln/detail/CVE-2020-10544","https://github.com/primefaces/primefaces/issues/5642","https://github.com/primefaces/primefaces/commit/9982c4f7a83f75e3ab06168fa283e3d6128dfd1f","https://github.com/primefaces/primefaces"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-fw5f-7c6c-3vmv","url":"https://osv.dev/vulnerability/GHSA-fw5f-7c6c-3vmv"}],"summary":"Cross-site Scripting in PrimeFaces"}