{"action":"Upgrade org.xwiki.platform:xwiki-platform-filter-ui to 12.10.11 (12.10.x), 13.4.7 (13.4.x) or 13.10.3 (13.10.x) or later.","affected":[{"fixed":"12.10.11","introduced":"5.4.4"},{"fixed":"13.4.7","introduced":"13.0.0"},{"fixed":"13.10.3","introduced":"13.5.0"}],"component":"org.xwiki.platform:xwiki-platform-filter-ui","cve_ids":["CVE-2022-29258"],"ecosystem":"Maven","epss":0.01008,"exploited":false,"fixed_versions":["12.10.11","13.4.7","13.10.3"],"ghsa_id":"GHSA-xjfw-5vv5-vjq2","id":"tcs_01M5N9JFP6GF5J9TC1KA021HRD","modified_at":"2023-11-08T04:09:12.720581Z","published_at":"2022-06-01T20:25:54Z","references":["https://osv.dev/vulnerability/GHSA-xjfw-5vv5-vjq2","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-xjfw-5vv5-vjq2","https://nvd.nist.gov/vuln/detail/CVE-2022-29258","https://github.com/xwiki/xwiki-platform/commit/21906acb5ee2304552f56f9bbdbf8e7d368f7f3a","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-19293"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-xjfw-5vv5-vjq2","url":"https://osv.dev/vulnerability/GHSA-xjfw-5vv5-vjq2"}],"summary":"Cross-site Scripting in Filter Stream Converter Application in XWiki Platform"}