Lucene search
+L

1017 matches found

Prion
Prion
•added 2022/12/07 4:15 a.m.•25 views

Cross site scripting

Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

4.3CVSS4.8AI score0.00625EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/12/07 12:00 a.m.•103 views

CVE-2022-42486

CVE-2022-42486 is a stored XSS vulnerability in baserCMS, affecting versions prior to 4.7.2. An authenticated administrator can inject arbitrary script via the User group management feature. Impact described in connected sources includes client-side script execution risk; no remote code execution...

4.8CVSS4.8AI score0.00625EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/12/07 12:00 a.m.•8 views

CVE-2022-42486

Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

5.8AI score0.00625EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/12/07 12:00 a.m.•19 views

PT-2022-26454 · Basercms · Basercms

Name of the Vulnerable Software and Affected Versions: baserCMS versions prior to 4.7.2 Description: The issue allows a remote authenticated attacker with administrative privileges to inject an arbitrary script in the User group management of baserCMS. This is a stored cross-site scripting issue...

4.8CVSS4.7AI score0.00625EPSS
SaveExploits0References7
Mend
Mend
•added 2022/12/07 12:00 a.m.•8 views

CVE-2022-42486

Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

4.8CVSS0.00625EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2022/12/07 12:00 a.m.•24 views

CVE-2022-42486

Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

4.8CVSS5AI score0.00625EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/12/07 12:00 a.m.•8 views

CVE-2022-41994

Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

5.8AI score0.00625EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/12/07 12:00 a.m.•20 views

CVE-2022-41994

Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

4.8CVSS5AI score
SaveExploits0References4
Mend
Mend
•added 2022/12/07 12:00 a.m.•6 views

CVE-2022-41994

Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

4.8CVSS0.00625EPSS
SaveExploits0References5
CVE
CVE
•added 2022/12/07 12:00 a.m.•127 views

CVE-2022-41994

CVE-2022-41994 is a stored XSS vulnerability in baserCMS, affecting versions prior to 4.7.2. The issue resides in Permission Settings and can be exploited by a remote authenticated attacker with administrative privileges to inject arbitrary script. Affected software is baserCMS; root cause is sto...

4.8CVSS4.8AI score0.00625EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/12/07 12:00 a.m.•58 views

CVE-2022-41994

Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

5.2AI score0.00625EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/07 12:00 a.m.•2 views

CVE-2022-41994: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

4.8CVSS5.8AI score0.00625EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/07 12:00 a.m.•4 views

CVE-2022-42486: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

4.8CVSS5.8AI score0.00625EPSS
SaveExploits0References3
Veracode
Veracode
•added 2022/12/01 11:34 a.m.•22 views

Cross-site Scripting (XSS)

baserproject/basercms is vulnerable to cross-site scripting. The vulnerability exists due to insufficient sanitization of user-supplied data in user group management feature which allows an attacker to inject and execute malicious javaScript on victim's browser...

4.8CVSS5.3AI score0.00625EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2022/12/01 11:19 a.m.•27 views

Cross-site Scripting (XSS)

baserproject/basercms is vulnerable to cross-site scripting. The vulnerability exists due to insufficient sanitization of user-supplied data in the permission settings feature which allows an attacker to inject and execute malicious JavaScript on the victim's browser...

4.8CVSS5.3AI score0.00625EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2022/11/28 10:14 p.m.•56 views

GHSA-395X-WV32-44V5 baserproject/basercms vulnerable to cross-site scripting (XSS) vulnerability

There is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS...

4.6CVSS4.7AI score0.00594EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2022/11/28 10:14 p.m.•55 views

baserproject/basercms vulnerable to cross-site scripting (XSS) vulnerability

There is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS...

6.1CVSS5AI score0.00594EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
•added 2022/11/28 8:00 a.m.•28 views

Cross-site Scripting (XSS)

baserproject/basercms is vulnerable to cross-site scripting. The vulnerability exists when the management system is used by an unspecified number of users which allows an attacker to inject and execute malicious JavaScript...

6.1CVSS6AI score0.00594EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2022/11/25 8:15 p.m.•54 views

CVE-2022-39325

BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users...

6.1CVSS0.00594EPSS
SaveExploits0References3
Prion
Prion
•added 2022/11/25 8:15 p.m.•22 views

Cross site scripting

BaserCMS is a content management system with a japanese language focus. In affected versions there is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users...

5.8CVSS5.9AI score0.00594EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder