Lucene search

K
githubGitHub Advisory DatabaseGHSA-24P5-X9F9-VVPX
HistoryJun 08, 2021 - 8:10 p.m.

Cross-site Scripting (XSS) in baserCMS

2021-06-0820:10:27
CWE-79
GitHub Advisory Database
github.com
23

0.001 Low

EPSS

Percentile

28.6%

Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.

CPENameOperatorVersion
baserproject/basercmslt4.4.5

0.001 Low

EPSS

Percentile

28.6%

Related for GHSA-24P5-X9F9-VVPX