{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"1.8","last_affected":"3.0.1"}],"component":"org.xwiki.platform:xwiki-core-rendering-macro-rss","cve_ids":["CVE-2023-29202"],"ecosystem":"Maven","epss":0.01393,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-c885-89fw-55qr","id":"tcs_01M5N8RXKH0PZ2BVW2G556J00M","modified_at":"2023-11-08T04:12:17.392995Z","published_at":"2023-04-12T20:38:37Z","references":["https://osv.dev/vulnerability/GHSA-c885-89fw-55qr","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-c885-89fw-55qr","https://nvd.nist.gov/vuln/detail/CVE-2023-29202","https://github.com/xwiki/xwiki-platform/commit/5c7ebe47c2897e92d8f04fe2e15027e84dc3ec03","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-19671"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-c885-89fw-55qr","url":"https://osv.dev/vulnerability/GHSA-c885-89fw-55qr"}],"summary":"org.xwiki.platform:xwiki-platform-rendering-macro-rss Cross-site Scripting vulnerability"}