Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.
CPE | Name | Operator | Version |
---|---|---|---|
baserproject/basercms | lt | 4.4.5 |