Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-66c2-p8rh-qx87

Опубликовано: 22 фев. 2024
Источник: github
Github: Прошло ревью
CVSS3: 6.1

Описание

baserCMS Cross-site Scripting vulnerability in Site search Feature

There is a XSS Vulnerability in Site search Feature to baserCMS.

Target

baserCMS 5.0.8 and earlier versions

Vulnerability

Malicious code may be executed in Site search Feature.

Countermeasures

Update to the latest version of baserCMS

Please refer to the following page to reference for more information. https://basercms.net/security/JVN_73283159

Пакеты

Наименование

baserproject/basercms

composer
Затронутые версииВерсия исправления

< 5.0.9

5.0.9

EPSS

Процентиль: 70%
0.00622
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
почти 2 года назад

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the site search feature. Version 5.0.9 contains a fix for this vulnerability.

EPSS

Процентиль: 70%
0.00622
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79