CVE-2020-15159

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting XSS and Remote Code Execution RCE. This may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file.The affected components are ThemeFilesController.php and...

Cross-site Scripting (XSS)

baserCMS is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient input validation and output encoding in the Blog posts and Contents list feature, allows attackers to inject and execute malicious scripts within the web application...