{"action":"Upgrade Umbraco.CMS to 8.18.10 (8.x), 10.7.0 (10.x) or 12.1.0 (12.x) or later.","affected":[{"fixed":"8.18.10","introduced":"8.0.0"},{"fixed":"10.7.0","introduced":"9.0.0"},{"fixed":"12.1.0","introduced":"11.0.0"}],"component":"Umbraco.CMS","cve_ids":["CVE-2023-38694"],"ecosystem":"NuGet","epss":0.00411,"exploited":false,"fixed_versions":["8.18.10","10.7.0","12.1.0"],"ghsa_id":"GHSA-xxc6-35r7-796w","id":"tcs_01M5N95VH7NX87NVY90KP6HMDY","modified_at":"2024-02-16T08:11:04.367728Z","published_at":"2023-12-13T13:17:37Z","references":["https://osv.dev/vulnerability/GHSA-xxc6-35r7-796w","https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-xxc6-35r7-796w","https://nvd.nist.gov/vuln/detail/CVE-2023-38694","https://github.com/umbraco/Umbraco-CMS"],"severity":{"label":"unknown","score":0},"sources":[{"source":"osv","source_id":"GHSA-xxc6-35r7-796w","url":"https://osv.dev/vulnerability/GHSA-xxc6-35r7-796w"}],"summary":"Possible injection of HTML into user invite mails"}