Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-46996 EUVD-2024-2961GHSA-66jv-qrm3-vvfg

baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature

Published Oct 24, 2024 · Updated Oct 24, 2024 · Assigned by GitHub_M

Description

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Blog posts feature. Version 5.1.2 fixes this issue.

Affected products

VendorProductAffectedFixed
baserproject basercms < 5.1.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist baserproject/basercms < 5.1.2 5.1.2 GHSA-66jv-qrm3-vvfg

References