{"action":"Upgrade org.xwiki.platform:xwiki-platform-web-templates to 12.10.11 (12.10.x), 13.4.7 (13.4.x) or 13.10.3 (13.10.x) or later.","affected":[{"fixed":"12.10.11","introduced":"2.6.1"},{"fixed":"13.4.7","introduced":"13.0.0"},{"fixed":"13.10.3","introduced":"13.10.0"}],"component":"org.xwiki.platform:xwiki-platform-web-templates","cve_ids":["CVE-2022-23622"],"ecosystem":"Maven","epss":0.01008,"exploited":false,"fixed_versions":["12.10.11","13.4.7","13.10.3"],"ghsa_id":"GHSA-gx6h-936c-vrrr","id":"tcs_01M5N8Z86EWRPEGZB7Q8H8DXP9","modified_at":"2023-11-08T04:08:25.392451Z","published_at":"2022-02-09T23:25:44Z","references":["https://osv.dev/vulnerability/GHSA-gx6h-936c-vrrr","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-gx6h-936c-vrrr","https://nvd.nist.gov/vuln/detail/CVE-2022-23622","https://github.com/xwiki/xwiki-platform/commit/053d957d53f2a543d158f3ab651e390d2728e0b9","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-19291"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-gx6h-936c-vrrr","url":"https://osv.dev/vulnerability/GHSA-gx6h-936c-vrrr"}],"summary":"Cross site scripting in registration template in xwiki-platform"}