Medium · 5.4 CVE-2016-4880 EUVD-2022-4649GHSA-mxfv-c8p8-qw5h

baserCMS Cross-site Scripting vulnerability

Published May 12, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Vendor: baserCMS Users Community Product: baserCMS plugin Blog Package: baserproject/basercms Ecosystem: Packagist

Description

Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
baserCMS Users Community	baserCMS plugin Blog	version 3.0.10 and earlier	—

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Packagist	baserproject/basercms	< 3.0.11	3.0.11	GHSA-mxfv-c8p8-qw5h

References

http://basercms.net/security/JVN92765814
JVN#92765814 third-party-advisory
93217 vdb-entry