{"action":"Upgrade org.xwiki.platform:xwiki-platform-sharepage-api to 14.4.8 (14.4.x) or 14.10.4 (14.10.x) or later.","affected":[{"fixed":"14.4.8","introduced":"2.6-rc-2"},{"fixed":"14.10.4","introduced":"14.5"}],"component":"org.xwiki.platform:xwiki-platform-sharepage-api","cve_ids":["CVE-2023-35155"],"ecosystem":"Maven","exploited":false,"fixed_versions":["14.4.8","14.10.4"],"ghsa_id":"GHSA-fwwj-wg89-7h4c","id":"tcs_01M5N8WVG82DPKB5G4S9S7ASVF","modified_at":"2023-11-08T04:12:50.437167Z","published_at":"2023-06-20T16:48:36Z","references":["https://osv.dev/vulnerability/GHSA-fwwj-wg89-7h4c","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-fwwj-wg89-7h4c","https://nvd.nist.gov/vuln/detail/CVE-2023-35155","https://github.com/xwiki/xwiki-platform/commit/ca88ebdefb2c9fa41490959cce9f9e62404799e7","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-20370"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-fwwj-wg89-7h4c","url":"https://osv.dev/vulnerability/GHSA-fwwj-wg89-7h4c"}],"summary":"XWiki Platform vulnerable to cross-site scripting in target parameter via share page by email"}