VDB
Sign up
MEDIUM6.1

GHSA-mr7q-fv7j-jcgv

baserCMS has a Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request

Quick fix

GHSA-mr7q-fv7j-jcgv — baserproject/basercms: upgrade to the fixed version with the command below.

composer require baserproject/basercms:^5.1.2

Details

XSS vulnerability in HTTP 400 Bad Request to baserCMS.

### Target baserCMS 5.1.1 and earlier versions

### Vulnerability Malicious code may be executed in HTTP 400 Bad Request.

### Countermeasures Update to the latest version of baserCMS

Please refer to the following page to reference for more information. https://basercms.net/security/JVN_00876083

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/baserproject/basercms
Introduced in: 0Fixed in: 5.1.2
Fixcomposer require baserproject/basercms:^5.1.2

References