{"action":"Upgrade vditor to 3.8.7 or later.","affected":[{"fixed":"3.8.7","introduced":"0"}],"component":"vditor","cve_ids":["CVE-2021-32855"],"ecosystem":"npm","epss":0.00584,"exploited":false,"fixed_versions":["3.8.7"],"ghsa_id":"GHSA-vfmp-9999-6wqj","id":"tcs_01M5KGBQ32Z5A5DX0B47G6AGHV","modified_at":"2023-11-08T04:06:02.540276Z","published_at":"2023-02-21T15:30:23Z","references":["https://osv.dev/vulnerability/GHSA-vfmp-9999-6wqj","https://nvd.nist.gov/vuln/detail/CVE-2021-32855","https://github.com/Vanessa219/vditor/issues/1085","https://github.com/Vanessa219/vditor/commit/1b2382d7f8a4ee509d9245db4450d926a0b24146","https://github.com/Vanessa219/vditor","https://securitylab.github.com/advisories/GHSL-2021-1006-vditor"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-vfmp-9999-6wqj","url":"https://osv.dev/vulnerability/GHSA-vfmp-9999-6wqj"}],"summary":"Vditor Cross-site Scripting vulnerability"}