GitHub Advisoryadvisory · Packagist

GHSA-24p5-x9f9-vvpx Cross-site Scripting (XSS) in baserCMS

MEDIUM Published 2021-06-08 Modified 2023-07-05 Official page ↗
Aliases
CVE-2021-20681
Ecosystem
Packagist
Packages
baserproject/basercms
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2021-03-29

Affected packages

• Packagist baserproject/basercms: < 4.4.5 → fixed in 4.4.5

Description

Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2021-20681 Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References