CVE-2021-20683

2021-03-2608:50:29

jpcert

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.4%

JSON

Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.

CNA Affected

[
  {
    "product": "baserCMS",
    "vendor": "baserCMS Users Community",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 4.4.5"
      }
    ]
  }
]