{"action":"Upgrade org.xwiki.platform:xwiki-platform-flamingo-theme-ui to 12.10.11 (12.10.x), 13.4.7 (13.4.x) or 13.10.3 (13.10.x) or later.","affected":[{"fixed":"12.10.11","introduced":"0"},{"fixed":"13.4.7","introduced":"13.0.0"},{"fixed":"13.10.3","introduced":"13.5.0"}],"component":"org.xwiki.platform:xwiki-platform-flamingo-theme-ui","cve_ids":["CVE-2022-29251"],"ecosystem":"Maven","epss":0.01336,"exploited":false,"fixed_versions":["12.10.11","13.4.7","13.10.3"],"ghsa_id":"GHSA-vmhh-xh3g-j992","id":"tcs_01M5N9EAXFQ5DGM0ZVTET3M53R","modified_at":"2023-11-08T04:09:12.290389Z","published_at":"2022-05-25T22:40:57Z","references":["https://osv.dev/vulnerability/GHSA-vmhh-xh3g-j992","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vmhh-xh3g-j992","https://nvd.nist.gov/vuln/detail/CVE-2022-29251","https://github.com/xwiki/xwiki-platform/commit/bd935320bee3c27cf7548351b1d0f935f116d437","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-19294"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-vmhh-xh3g-j992","url":"https://osv.dev/vulnerability/GHSA-vmhh-xh3g-j992"}],"summary":"Cross-site Scripting in the Flamingo theme manager"}