Lucene search

K
osvGoogleOSV:GHSA-V9W8-HQ92-V39M
HistoryJun 08, 2021 - 8:10 p.m.

Cross-site Scripting (XSS) in baserCMS

2021-06-0820:10:45
Google
osv.dev
7
cross-site scripting
basercms
remote attackers
arbitrary script
blog article
software vulnerability

EPSS

0.001

Percentile

29.2%

Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors.

EPSS

0.001

Percentile

29.2%

Related for OSV:GHSA-V9W8-HQ92-V39M