MEDIUM5.4

GHSA-994g-74gq-5qpr

XSS in baserCMS

Details

Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/baserproject/basercms

Introduced in: 4.0.0

No fixed version published yet for baserproject/basercms (composer). Pin to a known-safe version or switch to an alternative.

Packagist/baserproject/basercms

Introduced in: 0

No fixed version published yet for baserproject/basercms (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2018-0570[ADVISORY]
https://basercms.net/security/JVN67881316[WEB]
https://github.com/baserproject/basercms[PACKAGE]
http://jvn.jp/en/jp/JVN67881316/index.html[WEB]