{"action":"Upgrade org.xwiki.platform:xwiki-platform-mentions-ui to 13.10.6 (13.x) or 14.4 (14.x) or later.","affected":[{"fixed":"13.10.6","introduced":"12.5-rc-1"},{"fixed":"14.4","introduced":"14.0"}],"component":"org.xwiki.platform:xwiki-platform-mentions-ui","cve_ids":["CVE-2022-36098"],"ecosystem":"Maven","epss":0.71607,"exploited":false,"fixed_versions":["13.10.6","14.4"],"ghsa_id":"GHSA-c5v8-2q4r-5w9v","id":"tcs_01M5N8RNQRS0A8YP9VWDTYAKTM","modified_at":"2023-11-08T04:10:00.925468Z","published_at":"2022-09-16T17:36:44Z","references":["https://osv.dev/vulnerability/GHSA-c5v8-2q4r-5w9v","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-c5v8-2q4r-5w9v","https://nvd.nist.gov/vuln/detail/CVE-2022-36098","https://github.com/xwiki/xwiki-platform/commit/4032dc896857597efd169966dc9e2752a9fdd459#diff-4fe22885f772e47d3561a05348f73921669ec12d4413b220383b73c7ae484bc4R608-R610","https://github.com/xwiki/xwiki-platform/commit/4f290d87a8355e967378a1ed6aee23a06ba162eb","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-19752"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-c5v8-2q4r-5w9v","url":"https://osv.dev/vulnerability/GHSA-c5v8-2q4r-5w9v"}],"summary":"XWiki Platform Mentions UI vulnerable to Cross-site Scripting"}