CVE-2024-26128

Опубликовано: 22 фев. 2024

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature. Version 5.0.9 contains a fix for this vulnerability.

Ссылки

https://basercms.net/security/JVN_73283159
Vendor Advisory
https://github.com/baserproject/basercms/commit/18f426d63e752b4d22c40e9ea8d1f6e692ef601c
Patch
https://github.com/baserproject/basercms/security/advisories/GHSA-jjxq-m8h3-4vw5
Vendor Advisory
https://basercms.net/security/JVN_73283159
Vendor Advisory
https://github.com/baserproject/basercms/commit/18f426d63e752b4d22c40e9ea8d1f6e692ef601c
Patch
https://github.com/baserproject/basercms/security/advisories/GHSA-jjxq-m8h3-4vw5
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*

Версия до 5.0.9 (исключая)

EPSS

Процентиль: 82%

0.01754

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-jjxq-m8h3-4vw5