CVE-2020-15155

Опубликовано: 28 авг. 2020

Источник: nvd

CVSS3: 7.3

CVSS2: 2.1

EPSS Низкий

Описание

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components is toolbar.php. The issue is fixed in version 4.3.7.

Ссылки

https://basercms.net/security/20200827
Vendor Advisory
https://github.com/baserproject/basercms/commit/94cbfab74c9fd6d04492597a1a684674c3c0e30f
Patch
Third Party Advisory
https://github.com/baserproject/basercms/security/advisories/GHSA-4r3m-j6x5-48m3
Patch
Third Party Advisory
https://basercms.net/security/20200827
Vendor Advisory
https://github.com/baserproject/basercms/commit/94cbfab74c9fd6d04492597a1a684674c3c0e30f
Patch
Third Party Advisory
https://github.com/baserproject/basercms/security/advisories/GHSA-4r3m-j6x5-48m3
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*

Версия до 4.3.6 (включая)

EPSS

Процентиль: 75%

0.00868

Низкий

7.3 High

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-4r3m-j6x5-48m3