CVE-2022-39325 Cross-site scripting vulnerability in BaserCMS

BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users...

CVE-2022-39325 Cross-site scripting vulnerability in BaserCMS

BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users...

CVE-2022-39325

CVE-2022-39325 relates to a cross-site scripting (XSS) vulnerability in baserCMS's management system, affecting 4.7.1 and earlier. The root cause is stored XSS on administrative pages (User management, Permission Settings, User group management), potentially enabling malicious JavaScript executio...

CVE-2022-39325 Cross-site scripting vulnerability in BaserCMS

BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users...

baserCMS 跨站脚本漏洞

baserCMS is an enterprise-level content management system CMS from the baserCMS team. A security vulnerability exists in baserCMS versions prior to 4.7.2, which stems from stored cross-site scripting in the user group management...

baserCMS 跨站脚本漏洞

baserCMS is an enterprise-level content management system CMS from the baserCMS team. A cross-site scripting vulnerability exists in baserCMS 4.7.1 and earlier versions, which can be exploited by an attacker to execute malicious JavaScript code that may alter the display of a page or disclose...

JVN#53682526: Multiple cross-site scripting vulnerabilities in baserCMS

baserCMS provided by baserCMS Users Community contains multiple cross-site scripting vulnerabilities listed below. Stored cross-site scripting vulnerability in User management CWE-79 - CVE-2022-39325 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N| Base...

baserCMS 跨站脚本漏洞

baserCMS is an enterprise-level content management system CMS from the baserCMS team. A security vulnerability exists in baserCMS versions prior to 4.7.2, which stems from stored cross-site scripting in permission settings...

GHSA-46VM-RWRF-JRXM CSRF in baserCMS 3.0.10 and earlier

Cross-site request forgery CSRF vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

GHSA-FG52-RC36-JP43 baserCMS Cross Site Request Forgery vulnerability

Cross-site request forgery CSRF vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

baserCMS Cross Site Request Forgery vulnerability

Cross-site request forgery CSRF vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CSRF in baserCMS 3.0.10 and earlier

Cross-site request forgery CSRF vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

GHSA-MXFV-C8P8-QW5H baserCMS Cross-site Scripting vulnerability

Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

baserCMS Cross-site Scripting vulnerability

Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

Sensitive Data Exposure in baserCMS

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to bypass access restriction in mail form to view a file which is uploaded by a site user via unspecified vectors...

baserCMS arbitrary file upload vulnerability

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers with a site operator privilege to upload arbitrary files...

GHSA-6J3P-VRPH-J7QQ OS Command Injection in baserCMS

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors...

GHSA-W935-P7MG-XC96 Sensitive Data Exposure in baserCMS

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to bypass access restriction in mail form to view a file which is uploaded by a site user via unspecified vectors...

GHSA-3MCP-6RV6-C69G baserCMS arbitrary file upload vulnerability

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers with a site operator privilege to upload arbitrary files...

XSS in baserCMS

Cross-site scripting vulnerability in baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...