{"action":"Upgrade webmention.js to 0.5.5 or later.","affected":[{"fixed":"0.5.5","introduced":"0"}],"component":"webmention.js","cve_ids":["CVE-2023-3672"],"ecosystem":"npm","epss":0.0049,"exploited":false,"fixed_versions":["0.5.5"],"ghsa_id":"GHSA-r54g-4qq6-chxg","id":"tcs_01M5KG7ZAH0CFB9B0AR6S1F08V","modified_at":"2023-11-08T04:12:58.086804Z","published_at":"2023-07-14T12:30:20Z","references":["https://osv.dev/vulnerability/GHSA-r54g-4qq6-chxg","https://nvd.nist.gov/vuln/detail/CVE-2023-3672","https://github.com/plaidweb/webmention.js/commit/3551b66b3e40da37fee89ecf72930c5efdc53011","https://github.com/PlaidWeb/webmention.js/blob/9457e71433c0d2430bbe767ecc5b5837140d0ee4/static/webmention.js#L330","https://github.com/plaidweb/webmention.js","https://huntr.dev/bounties/75cfb7ad-a75f-45ff-8688-32a9c55179aa"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-r54g-4qq6-chxg","url":"https://osv.dev/vulnerability/GHSA-r54g-4qq6-chxg"}],"summary":"webmention.js Cross-site Scripting vulnerability"}