{"action":"Upgrade react-draft-wysiwyg to 1.14.6 or later.","affected":[{"fixed":"1.14.6","introduced":"0"}],"component":"react-draft-wysiwyg","cve_ids":["CVE-2021-31712"],"ecosystem":"npm","epss":0.00792,"exploited":false,"fixed_versions":["1.14.6"],"ghsa_id":"GHSA-qcg2-h349-vwm3","id":"tcs_01M5KG5WS7Z5E2MARG40137KFF","modified_at":"2023-11-08T04:05:50.480506Z","published_at":"2021-05-06T15:52:35Z","references":["https://osv.dev/vulnerability/GHSA-qcg2-h349-vwm3","https://nvd.nist.gov/vuln/detail/CVE-2021-31712","https://github.com/jpuri/react-draft-wysiwyg/issues/1102","https://github.com/jpuri/react-draft-wysiwyg/pull/1104","https://github.com/jpuri/react-draft-wysiwyg/commit/d2faeb612b53f10dff048de7dc57e1f4044b5380"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-qcg2-h349-vwm3","url":"https://osv.dev/vulnerability/GHSA-qcg2-h349-vwm3"}],"summary":"Cross-site Scripting in React Draft Wysiwyg"}