CVEvulnerability
CVE-2021-20681
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-03-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.
Affected configurations
• basercms basercms (< 4.4.5)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://basercms.net/security/JVN64869876 Patch, Vendor Advisory
- https://jvn.jp/en/jp/JVN64869876/index.html Third Party Advisory
- https://basercms.net/security/JVN64869876 Patch, Vendor Advisory
- https://jvn.jp/en/jp/JVN64869876/index.html Third Party Advisory