Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jjxq-m8h3-4vw5

Опубликовано: 22 фев. 2024
Источник: github
Github: Прошло ревью
CVSS3: 5.4

Описание

baserCMS Cross-site Scripting vulnerability in Content Management

There is a XSS Vulnerability in Content Management Feature to baserCMS.

Target

baserCMS 5.0.8 and earlier versions

Vulnerability

Malicious code may be executed in Content Management Feature.

Countermeasures

Update to the latest version of baserCMS

Please refer to the following page to reference for more information. https://basercms.net/security/JVN_73283159

Пакеты

Наименование

baserproject/basercms

composer
Затронутые версииВерсия исправления

< 5.0.9

5.0.9

EPSS

Процентиль: 82%
0.01754
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
почти 2 года назад

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature. Version 5.0.9 contains a fix for this vulnerability.

EPSS

Процентиль: 82%
0.01754
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79