JVN#00876083: Multiple vulnerabilities in baserCMS

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. Stored cross-site scripting vulnerability due to inappropriate Slug handling on Article Edit CWE-79 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Base Score 5.4 CVE-2024-46996 Stored cross-site scripting...

CVE-2024-46995

creationtimestamp| type| source ---|---|--- 2024-10-24 21:50:52+00:00| seen| https://t.me/cvedetector/8844...

CVE-2024-46995

CVE-2024-46995 affects baserCMS prior to 5.1.2, with a cross-site scripting (XSS) vulnerability exposed via HTTP 400 Bad Request responses. The issue is fixed in 5.1.2 (and later), with advisories indicating upgrade to 5.1.3 or newer as a remediation path. Exploitation details are not provided in...